CVE-2021-34421

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-34421
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34421.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-34421
Published
2021-11-11T23:15:09Z
Modified
2026-07-09T05:44:25Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

References

Affected packages

Git / github.com/keybase/client

Affected ranges

Type
GIT
Repo
https://github.com/keybase/client
Events
Introduced
ac2177aec7800b53651c9c806941dccf62f3f975
Last Affected
ac2177aec7800b53651c9c806941dccf62f3f975
Database specific
Show details 
{
    "cpe": [
        "cpe:2.3:a:keybase:keybase:5.8.0:*:*:*:*:android:*:*",
        "cpe:2.3:a:keybase:keybase:5.8.0:*:*:*:*:iphone_os:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "5.8.0"
        },
        {
            "last_affected": "5.8.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

5.*
5.8.0
v5.*
v5.8.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-34421.json"