CVE-2025-4086 — Specially crafted filename could be used to obscure download type
A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only aff…
Published: 2025-04-29 · CVSS: 6.5 · CVSS 3.1
A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7