Vulnerabilities > Telegram > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-05-18 | CVE-2021-31321 | Out-of-bounds Write vulnerability in Telegram Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of their custom fork of the rlottie library. | 5.8 |
| 2021-05-18 | CVE-2021-31322 | Out-of-bounds Write vulnerability in Telegram Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. | 4.3 |
| 2021-05-18 | CVE-2021-31323 | Out-of-bounds Write vulnerability in Telegram Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. | 4.3 |
| 2021-04-20 | CVE-2021-30496 | Unspecified vulnerability in Telegram 7.6.2 The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the Persian language) into a channel or group. | 5.7 |
| 2021-02-19 | CVE-2021-27351 | Insufficient Session Expiration vulnerability in Telegram The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session. | 5.0 |
| 2020-08-11 | CVE-2020-17448 | Incorrect Authorization vulnerability in Telegram Desktop Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension. | 6.8 |
| 2020-05-01 | CVE-2020-12474 | Improper Input Validation vulnerability in Telegram Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL. | 4.3 |
| 2019-08-23 | CVE-2019-15514 | Information Exposure vulnerability in Telegram 5.10.0 The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers. | 5.0 |
| 2019-03-25 | CVE-2019-10044 | Improper Input Validation vulnerability in Telegram and Telegram Desktop Telegram Desktop before 1.5.12 on Windows, and the Telegram applications for Android, iOS, and Linux, is vulnerable to an IDN homograph attack when displaying messages containing URLs. | 6.8 |
| 2019-01-03 | CVE-2018-3986 | Information Exposure vulnerability in Telegram 4.9.0 An exploitable information disclosure vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application version 4.9.0. | 5.5 |