CVE-2025-14744

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14744", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2025-12-15T19:44:44.939Z", "datePublished": "2025-12-18T14:21:12.328Z", "dateUpdated": "2026-04-13T14:31:42.899Z"}, "containers": {"cna": {"affected": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "144.0", "lessThanOrEqual": "*", "versionType": "rpm"}]}], "descriptions": [{"lang": "en", "value": "Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0."}]}], "title": "Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984683"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-97/"}], "credits": [{"lang": "en", "value": "Azril"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:31:42.899Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-451", "lang": "en", "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-12-18T19:12:45.595694Z", "id": "CVE-2025-14744", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-18T19:19:42.637Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-14744", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-18T19:12:45.595694Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-451", "description": "CWE-451 User Interface (UI) Misrepresentation of Critical Information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-18T19:12:48.892Z"}}], "cna": {"title": "Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS", "credits": [{"lang": "en", "value": "Azril"}], "affected": [{"vendor": "Mozilla", "product": "Firefox for iOS", "versions": [{"status": "unaffected", "version": "144.0", "versionType": "rpm", "lessThanOrEqual": "*"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984683"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-97/"}], "descriptions": [{"lang": "en", "value": "Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.", "supportingMedia": [{"type": "text/html", "value": "Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0.", "base64": false}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:31:42.899Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14744", "state": "PUBLISHED", "dateUpdated": "2026-04-13T14:31:42.899Z", "dateReserved": "2025-12-15T19:44:44.939Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2025-12-18T14:21:12.328Z", "assignerShortName": "mozilla"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "*", "status": "unaffected", "version": "144.0", "versionType": "rpm"}]}], "source": "security@mozilla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "0ED73B6B-B41E-4DB1-8FEC-6550365BC33D", "versionEndExcluding": "144.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type. This vulnerability was fixed in Firefox for iOS 144.0."}, {"lang": "es", "value": "Los caracteres Unicode RTLO podr\u00edan permitir que sitios web maliciosos suplanten nombres de archivo en la interfaz de usuario de descargas de Firefox para iOS, enga\u00f1ando potencialmente a los usuarios para que guarden archivos de un tipo de archivo inesperado. Esta vulnerabilidad afecta a Firefox para iOS menor que 144.0."}], "id": "CVE-2025-14744", "lastModified": "2026-10-05T15:10:00.590", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14744", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-12-18T19:12:45.595694Z", "version": "2.0.3"}}]}, "published": "2025-12-18T15:15:52.500", "references": [{"source": "security@mozilla.org", "tags": ["Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1984683"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-97/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-451"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T18:53:52.999675+00:00", "value": {"mitigation_remediation": ["Install Firefox for iOS 144.0 or newer to eliminate the CWE-451 file name spoofing flaw", "If an update is not feasible, avoid downloading files from unfamiliar or untrusted sites, and always verify the actual file type after download to mitigate the CWE-451 information exposure risk", "Use iOS file\u2011type alert settings or a content\u2011inspection app to enforce strict MIME type checks when opening downloaded files, thereby reducing the chance of CWE-451 related mishandling"], "summary": {"action": "Update Browser", "impact": "File type spoofing in Firefox for iOS download UI"}, "threat_synthesis": {"affected_systems": "Mozilla Firefox for iOS, with all versions prior to 144.0 affected. Updating to 144.0 or newer removes the vulnerability; any older builds leave the download UI susceptible to filename spoofing via Unicode right\u2011to\u2011left override characters.", "description_and_impact": "Firefox for iOS downloads can display misleading file names when a Unicode right\u2011to\u2011left override character is present in an URL or web page, allowing a malicious site to trick a user into saving a file of an unintended type. The consequence is that a user may unknowingly download a file that is different from what the URL indicates, potentially exposing the device to content that is misclassified by the operating system and could lead to confusion or exploitation if the file type is malicious. The flaw was addressed in Firefox for iOS 144.0.", "risk_and_exploitability": "The CVSS score of 6.5 indicates a moderate severity, and the EPSS score of less than 1% suggests a low probability of active exploitation at this time. The vulnerability is not listed in CISA KEV. An attacker would need to host a web page or deliver content containing targeted Unicode characters, a scenario that could arise from any website with user\u2011generated content. The attack vector is dissemination from a malicious site and relies on the user engaging with the download interface. Given the moderate score and low exploitation likelihood, the risk is considered limited but tangible, especially for users who do not update their browser promptly."}}}}, "created": "2025-12-19T09:16:07.742850+00:00", "updated": "2026-04-20T19:00:10.693758+00:00", "vendors": ["apple", "apple$PRODUCT$ios", "mozilla", "mozilla$PRODUCT$firefox_for_ios"]}