A AegiFlow
MEDIUMCVSS 4.3

CVE-2025-27425

CVE-2025-27425 updated by NVD

Modified
2026-10-07
Sources
nvd

Summary

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.