← back
CVE-2019-16992

CVE-2019-16992

EPSS 0.9%
The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/keybase/keybase-issues/issues/3583https://sneak.berlin/20190929/keybase-backdoor/