Itt is linkelték már: "If you install Firefox 38, you can no longer get exploited directly via Firefox," Drake told Ars. "However, if I make your Firefox download the malicious video instead of trying to play it with a tag, it will still reach the vulnerable Android code."
http://arstechnica.com/security/2015/07/950-million-android-phones-can-…