AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-12391

HIGH · CVSS 8.8 EPSS 2.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-02-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-12391
Severity
HIGH
CVSS
8.8
EPSS
2.09%
Android Firefox

Original NVD Description

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.