This vulnerability allows an attacker to disable or bypass built‑in security mitigations within Firefox for Android. The flaw is associated with CWE‑200 (Information Exposure) and CWE‑807 (Improper Neutralization of Input During Web Page Generation), meaning that sensitive data could be disclosed or improperly handled. By disabling mitigations, an attacker could reduce the browser’s protection against various exploits, thereby potentially enabling compromise of the user device or data.

Mozilla Firefox for Android versions before 150 are potentially affected. All releases earlier than 150 are included because the CVE record does not provide finer version granularity, so any older build of the browser on an Android device may be vulnerable.

The CVSS base score of 7.5 indicates a high severity. The EPSS score is less than 1%, suggesting that the recorded probability of exploitation is very low. The issue is not listed in CISA KEV, so no confirmed exploitation has been documented. Based on the description, it is inferred that exploitation would involve the attacker providing malicious web content that the browser would then process with the bypassed mitigations. If that condition is met, the potential impact could be significant, but currently no live exploitation is known.