Telegram Type Obfuscation Vulnerability

Telegram is an instant messaging mobile application. Telegram versions prior to 7.1.0 2090 for Android, 7.1 for iOS, and 7.1 for macOS are subject to a type obfuscation vulnerability in the custom derived VDasher constructor function of the rlottie library. An attacker can exploit this...

Telegram heap buffer overflow vulnerability (CNVD-2021-38310)

Telegram is an instant messaging mobile application. A heap buffer overflow vulnerability exists in the custom derived LottieParserImpl :: parseDashProperty function of the rlottie library in Telegram for Android prior to version 7.1.0 2090, iOS prior to version 7.1, and macOS prior to version 7....

Telegram Heap Buffer Overflow Vulnerability

Telegram is an instant messaging mobile application. A heap buffer overflow vulnerability exists in the custom derived VGradientCache :: generateGradientColorTable function of the Rlottie library for Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior t...

Telegram Type Obfuscation Vulnerability (CNVD-2021-38311)

Telegram is an instant messaging mobile application. Telegram Android version prior to 7.1.0 2090, iOS version prior to 7.1, and macOS version prior to 7.1 are subject to a type confusion vulnerability in the LOTCompLayerItem :: LOTCompLayerItem function, which is a custom derivative of the rlott...

CVE-2021-31317

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's heap memory out-of-bounds on a victim device via a malicious animated...

CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

CVE-2021-31321

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Stack Based Overflow in the graysplitcubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a...

Telegram 缓冲区错误漏洞

Telegram is an instant messaging mobile application. Telegram versions prior to 7.1.0 2090 for Android, 7.1 for iOS, and 7.1 for macOS are subject to a type obfuscation vulnerability in the custom derived VDasher constructor function of the rlottie library. An attacker can exploit this...

CVE-2021-22662

creationtimestamp| type| source ---|---|--- 2021-03-03 20:45:38+00:00| seen| https://t.me/cibsecurity/24404...

Telegram Code Issue Vulnerability

Telegram is an instant messaging mobile application.Microsoft Windows is a desktop operating system from Microsoft Corporation. A security vulnerability exists in Telegram. The vulnerability stems from the application's inability to invalidate the most recently active session. The following...

CVE-2021-21143

creationtimestamp| type| source ---|---|--- 2021-02-09 18:40:46+00:00| seen| https://t.me/cibsecurity/23315...

CVE-2021-21722

creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:41+00:00| seen| https://t.me/cibsecurity/22162...

CVE-2020-27773

creationtimestamp| type| source ---|---|--- 2020-12-05 00:27:29+00:00| seen| https://t.me/cibsecurity/17174...

CVE-2020-9283

creationtimestamp| type| source ---|---|--- 2020-06-08 18:43:02+00:00| published-proof-of-concept| Telegram/fzdwQ59bxpUhcGqNHEv9Q6ElitBZZ6KUAvDsjCsl3yT 2023-11-13 00:47:30+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/688...

CVE-2016-10949

creationtimestamp| type| source ---|---|--- 2019-09-13 16:28:24+00:00| seen| https://t.me/cibsecurity/6741...

CVE-2017-8408

creationtimestamp| type| source ---|---|--- 2019-07-02 20:34:01+00:00| seen| https://t.me/cibsecurity/5296 2019-07-08 20:29:33+00:00| seen| https://t.me/cibsecurity/5388...

CVE-2018-15172

creationtimestamp| type| source ---|---|--- 2018-08-16 12:21:18+00:00| published-proof-of-concept| https://t.me/VulnerabilityNews/763...

The vulnerability of the Telegram Messenger messaging app allows a hacker to gain access to messages in the secret chat.

The vulnerability of the cleartext component in the Telegram Messenger application is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to messages in the secret chat by reading the memory regions used...

Telegram (API) Cross-Site Request Forgery Vulnerability

Telegram is a cloud-based instant messaging service that supports both mobile and desktop versions, enabling users to exchange messages, pictures, and videos instantly. Telegram suffers from a cross-site request forgery vulnerability that allows an attacker to execute application functions by...