The vulnerability of the gray_split_cubic function in the Rlottie animation-generation library, related to buffer-out writing, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...

UBUNTU-CVE-2021-31322

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

CVE-2021-31320

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim...

PT-2021-19240 · Telegram +2 · Telegram Ios +4

Name of the Vulnerable Software and Affected Versions: Telegram Android versions prior to 7.1.0 2090 Telegram iOS versions prior to 7.1 Telegram macOS versions prior to 7.1 Description: The issue is related to a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of th...