VULNERABILITY INTELLIGENCE

CVE-2021-34421

CVSS score3.7 LOW
EPSS probability0.71%
CISA KEVNot currently listed
Published2021-11-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

Weakness classification

  • nvd@nist.gov: CWE-459

Primary references