CVE-2019-16992

Publication date

2019-09-29 23:52:58

Family

mitre

State

PUBLISHED

Description

The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a users private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a users personal position on the semantics of an attestation.