CVE-2021-30496

2021-04-2000:00:00

mitre

github.com

telegram app

ios

remote users

application crash

attacker-supplied message

channel

group

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

46.4%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the Persian language) into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor’s perspective is that “this behavior can’t be considered a vulnerability.”

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:telegram:telegram:*:*:*:*:*:iphone_os:*:*"
    ],
    "vendor": "telegram",
    "product": "telegram",
    "versions": [
      {
        "status": "affected",
        "version": "7.6.2"
      }
    ],
    "defaultStatus": "unknown"
  }
]