Medium severity4.3NVD Advisory· Published Sep 17, 2022· Updated Jun 17, 2026

CVE-2022-39212

Description

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an attacker could see the last video frame of any participant who has video disabled but a camera selected. It is recommended that the Nextcloud Talk app is upgraded to 13.0.8 or 14.0.4. Users unable to upgrade should select "None" as camera before joining the call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Talk
cpe:2.3:a:nextcloud:talk:*:*:*:*:*:*:*:*
Range: <13.0.8
Nextcloud/Nextcloudllm-fuzzy
Range: before 13.0.8 or 14.0.4
Nextcloud/security-advisoriescpe-rescue
Range: < 13.0.8

Patches

Vulnerability mechanics

References

github.com/nextcloud/spreed/pull/7673nvdPatchThird Party Advisory
github.com/nextcloud/security-advisories/security/advisories/GHSA-wq3g-2x46-q2gvnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000