CVE-2019-9798

CVE-2019-9798 describes a vulnerability in Firefox on Android where the browser can load a library from the APITRACE_LIB environment variable. This directory is writable by all users and applications, allowing a malicious third-party application to conduct a man-in-the-middle attack by injecting malicious code. The vulnerability is rated 7.4 HIGH, indicating a network-based attack with high impact on confidentiality and integrity, though requiring high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.