Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker.
References
Link | Resource |
---|---|
https://www.shielder.it/advisories/telegram-rlottie-blit-stack-buffer-overflow/ | Exploit Third Party Advisory |
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-05-18 13:15
Updated : 2021-05-25 11:08
NVD link : CVE-2021-31315
Mitre link : CVE-2021-31315
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
telegram
- telegram