CVE-2014-1484: Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths,...

Security readout for executives and security teams

This is an old Firefox for Android information leak. On Android 4.2 and earlier, Firefox versions before 27.0 wrote profile paths into system logs, letting a malicious local app learn sensitive path information. It is not described as remote code execution, and no active exploitation is cited in the provided sources. Exposure is most likely limited to legacy Android devices running Android 4.2 or earlier with Firefox for Android before 27.0 installed. Modern managed fleets are unlikely to be affected unless old devices, test phones, embedded Android builds, or archived mobile images remain in use. Treat this as a legacy hygiene issue unless the organization still uses old Android devices. It does not justify emergency response by itself, but unsupported mobile platforms with co-installed untrusted apps create avoidable exposure and should be removed from business environments. Mitigation focus: Update Firefox for Android to version 27.0 or later where applicable.; Retire or isolate Android 4.2 and earlier devices from corporate use.; Remove untrusted apps from any legacy Android devices still retained..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.