CVE-2021-21301

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-21301

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21301.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-21301

Aliases

GHSA-7fg4-x8vj-qvxf

Published

2021-02-11T18:15:16Z

Modified

2026-10-24T10:50:24Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

[none]

Details

Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:wire:wire:*:*:*:*:*:iphone_os:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "3.75"
                        },
                        {
                            "fixed":  "3.75"
                        },
                        {
                            "fixed":  "3.75"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "wire:wire"
        },
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "fixed":  "3.75"
                        },
                        {
                            "fixed":  "3.75"
                        }
                    ],
                    "source":  "DESCRIPTION"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/wireapp/wire-ios

Affected ranges

Type

GIT

Repo

https://github.com/wireapp/wire-ios

Events

Introduced

Fixed

7e3c30120066c9b10e50cc0d20012d0849c33a40

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "7e3c30120066c9b10e50cc0d20012d0849c33a40"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21301.json"