CVE-2021-21301
Summary
| CVE | CVE-2021-21301 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-11 18:15:00 UTC |
| Updated | 2021-04-20 20:51:00 UTC |
| Description | Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75. |
Risk And Classification
Problem Types: CWE-200
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [Fix] video capture state (#4879) · wireapp/wire-ios@7e3c301 · GitHub | MISC | github.com | Patch, Third Party Advisory |
| [Fix] video capture state by David-Henner · Pull Request #4879 · wireapp/wire-ios · GitHub | MISC | github.com | Patch, Third Party Advisory |
| Video feed was captured while user has disabled video · Advisory · wireapp/wire-ios · GitHub | CONFIRM | github.com | Patch, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 630665 Wire For iOS Exposure of Sensitive Information Vulnerability