VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 30, 2019· Updated Jun 17, 2026

CVE-2019-16992

CVE-2019-16992

Description

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a user's private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a user's personal position on the semantics of an attestation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Keybase/Keybase2 versions
    cpe:2.3:a:keybase:keybase:2.13.2:*:*:*:*:iphone_os:*:*+ 1 more
    • cpe:2.3:a:keybase:keybase:2.13.2:*:*:*:*:iphone_os:*:*
    • (no CPE)range: = 2.13.2
  • Keybase/Keybase appdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.