A series of vulnerabilities have been discovered in Firefox for Android that allows a malicious application to successfully derandomize the Firefox profile directory name in a practical amount of time and then leak sensitive data (such as cookies and cached information) which reside in that directory, breaking Android's sandbox.
688b048fb5365a45f0a237ef602cef2bde7a27679794b9c23fb305a9ed177a61