CVE-2025-54143 — Sandboxed iframes could allow local downloads despite sandbox restrictions

CVE-2025-54143

Sandboxed iframes could allow local downloads despite sandbox restrictions PUBLISHED

Description (CNA)

Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141.

Affected (CNA)

Vendor / product	Versions
Mozilla / Firefox for iOS	unaffected 141 through *

CWE

No CWE identifiers supplied.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1912671
https://www.mozilla.org/security/advisories/mfsa2025-60/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.