CVE-2025-10535 is a vulnerability in the Privacy component of Firefox for Android that allows information disclosure and mitigation bypass. This flaw was reported by Rebeca Tudor and is classified under CWE-200 (Information Exposure). The vulnerability affects Firefox versions prior to 143 and was fixed in Firefox 143. The CVSS 3.1 vector indicates it is remotely exploitable without privileges or user interaction, with a high impact on integrity but no impact on confidentiality or availability. Mozilla published an advisory (MFSA 2025-73) confirming the fix in Firefox 143.

The vulnerability allows an attacker to bypass privacy mitigations and disclose information in Firefox for Android. While it does not impact confidentiality or availability directly, it has a high impact on integrity, meaning the attacker could potentially manipulate or bypass privacy protections. There are no known exploits in the wild at this time.

Mozilla has released an official fix for this vulnerability in Firefox version 143. Users and administrators should update Firefox for Android to version 143 or later to remediate this issue. Since this is not a cloud service, manual updating is required. Patch status is confirmed by the vendor advisory.