CVE-2021-34421
Dashboard / Vulnerabilities / CVE-2021-34421
CVE-2021-34421
Published: 11 Nov 2021Last Modified: 9 Jul 2026
Summary:
Details: The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.
Affected packages
Package
Name:
Purl:
Affected ranges
Type: GIT
Events:
Introduced- ac2177aec7800b53651c9c806941dccf62f3f975
Fixed -None
Affected versions
5.8.0
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
