Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2021-34421

Retained exploded messages in Keybase Clients for Android and iOS

Description

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc Keybase Client for Android

  • unspecified to < 5.8.0affected

Zoom Video Communications Inc Keybase Client for iOS

  • unspecified to < 5.8.0affected

References