CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Android, Firefox.
CVE
CVE-2025-4086
Severity
MEDIUM
CVSS
6.5
EPSS
0.28%
Android Firefox
Original NVD Description
A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Related CVEs
Other vulnerabilities affecting the same vendor(s)