CVE-2018-15543

An issue was discovered in the org.telegram.messenger application 4.8.11 for Android. The FingerprintManager class for Biometric validation allows authentication bypass through the callback method from onAuthenticationFailed to onAuthenticationSucceeded with null, because the fingerprint API in...

CVE-2018-15543

The CVE-2018-15543 issue affects org.telegram.messenger for Android (version 4.8.11). The FingerprintManager biometric validation flow can bypass authentication via a callback sequence from onAuthenticationFailed to onAuthenticationSucceeded with null, due to how the fingerprint API interacts wit...