CVE-2021-34421

Retained exploded messages in Keybase Clients for Android and iOS

Low · published November 11, 2021

CVSS v3.1
3.7
EPSS
1%
Percentile
53.2
In the wild
Unconfirmed
What it is

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.2th percentile
Published
2021-11-11T22:58Z
EPSS history
Timeline
  • 11 NOV 22:58Z
    Retained exploded messages in Keybase Clients for Android and iOS
    cvelistv5