Telegram Android Remote Code Execution Vulnerability Demonstrated by V12, Patch Released
Security firm V12 released a demonstration video showing a remote code execution (RCE) vulnerability affecting Telegram for Android, where a crafted message from a Telegram bot triggered execution of code opening the Calculator app. Telegram confirmed the issue and deployed a fix to all users promptly. The flaw appears linked to the Telegram Widgets component, but exact technical details, including the affected versions, privileges gained, and whether user interaction beyond opening a bot message is required, remain unclear. No CVE has been assigned yet, and no exploitation in the wild has been reported. Users are advised to update Telegram for Android immediately to mitigate risk, as the exploit proof-of-concept is public and may inspire attacks.
Linha do tempo
-
Telegram Android Remote Code Execution Vulnerability Demonstrated by V12, Patch Released
ler a análise desta fonte ocultar
Security firm V12 released a demonstration video showing a remote code execution (RCE) vulnerability affecting Telegram for Android, where a crafted message from a Telegram bot triggered execution of code opening the Calculator app. Telegram confirmed the issue and deployed a fix to all users promptly. The flaw appears linked to the Telegram Widgets component, but exact technical details, including the affected versions, privileges gained, and whether user interaction beyond opening a bot message is required, remain unclear. No CVE has been assigned yet, and no exploitation in the wild has been reported. Users are advised to update Telegram for Android immediately to mitigate risk, as the exploit proof-of-concept is public and may inspire attacks.