A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox ar…

High CVSS 7.5

CVECVE-2023-25747

First seen2026-08-19 16:16 UTC

Disclosed2023-06-19 11:15 UTC

Last updated2026-08-19 16:16 UTC

Channel statusauto

Summary

A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://bugzilla.mozilla.org/show_bug.cgi?id=1815801 Permissions Required
https://www.mozilla.org/security/advisories/mfsa2023-08/ Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1815801 Permissions Required
https://www.mozilla.org/security/advisories/mfsa2023-08/ Vendor Advisory

Timeline

2026-08-19 nvd_ingest NVD