CVE-2018-17613

CVE-2018-17613 affects Telegram Desktop (tdesktop) 1.3.16 alpha. When “Use proxy” is enabled, it transmits credentials and application data in cleartext over the SOCKS5 protocol. The description does not provide exploit details, affected versions beyond 1.3.16 alpha, or any remediation in place w...

CVE-2018-17613: Insufficiently Protected Credentials

Telegram Desktop aka tdesktop 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol...

CVE-2018-17231

CVE-2018-17231 concerns Telegram Desktop (tdesktop) 1.3.14, where an attacker could cause a denial of service by performing an "+Edit color palette+" search that triggers an index-out-of-range condition. The issue is noted as disputed by third parties because the attack does not cross a privilege...

CVE-2018-17231: Reachable Assertion

Telegram Desktop aka tdesktop 1.3.14 might allow attackers to cause a denial of service assertion failure and application exit via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack...