Mozilla has patched a zero-day exploit in late revisions to Firefox 72 and version 68 of the Android web browser. In a security advisory, the company said that it was made aware of "targeted attacks in the wild abusing this flaw."
The vulnerability lies in Firefox's JavaScript Just-in-Time compiler, IonMonkey, where it receives data and recognizes it as a certain type for processing. Malicious actors would be able to manipulate the type of data at this stage which could lead to code execution — this is known as type confusion.
Read MoreMozilla patches zero-day exploit for Firefox desktop and Android browsers (APK Download) was written by the awesome team at Android Police.
Android Match
Post a Comment