CVE-2019-17003 Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed

Description

Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

Affected products and versions

Product	Affected versions	Fixed in
Firefox for iOS 25	earliest → 25	No fix stated

Other CVEs of Firefox for iOS

The 60 CVEs of Firefox for iOS →

CVE-2026-116631 A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call… 5.4 Medium CVE-2026-116632 A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to… 5.4 Medium CVE-2026-103417 Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the… 5.5 Medium CVE-2026-103418 Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing… 8.8 High