CVE-2021-21301

Published: Feb 11, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75.

Affected (1)

Products: Wire: Wire

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wire Wire	Before 3.75

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/wireapp/wire-ios/pull/4879

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/wireapp/wire-ios/pull/4879

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.