CVE-2022-22758

When clicking on a tel: link, USSD codes, specified after a \ character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.This bug only affects...

PT-2022-4947

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 97 Description The issue is related to the handling of USSD codes in tel: links. When a user clicks on such a link, USSD codes specified after a character are included in the phone number. This could...