CVE-2021-34421

Retained exploded messages in Keybase Clients for Android and iOS

State: Published
Severity: 3.7 Low
Published: Nov 11, 2021
Updated: Sep 17, 2024
Reserved: Jun 9, 2021

Description

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	Zoom

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Keybase Client for AndroidZoom Video Communications Inc	before 5.8.0Affected
Keybase Client for iOSZoom Video Communications Inc	before 5.8.0Affected

References

https://explore.zoom.us/en/trust/security/security-bulletin

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.