CVE-2014-1566: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Mozilla Firefox before 31.1 on Android does not properly restrict copying of local files onto the SD card during processing of file: URLs, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1515.

Affected products

• Mozilla Firefox: up to and including 31.0; version 30.0 only

Published 2014-09-03. Last modified 2026-06-17.