Skip to content
OpenAdvisories
Low · 3.7 CVE-2021-34421 EUVD-2021-21079GHSA-9j45-jfq7-hc4v

Retained exploded messages in Keybase Clients for Android and iOS

Published Nov 11, 2021 · Updated Sep 17, 2024 · Assigned by Zoom

Description

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Keybase Client for Android unspecified – < 5.8.0 5.8.0
Zoom Video Communications Keybase Client for iOS unspecified – < 5.8.0 5.8.0

References