Security Researchers at IBM have discovered multiple vulnerabilities in Firefox for Android platform that allow a malicious application to leak the sensitive information related to the user’s profile. Android’s Firefox app stores the personal data at following location: where the random name for user’s. profile is used to prevent unwanted access to this directory in case of Firefox exploitation. The Android operating system has hardened its security with application Sandboxing features to ensure that no application can access sensitive information held by another without proper privileges. Researchers have already reported these vulnerabilities to the Mozilla and three out of four are alreadypatched in the latest versions.
Source: https://thehackernews.com/2014/03/multiple-vulnerabilities-in-firefox-for.html