Telegram Android Voice Call Vulnerability Enables Remote Code Execution Upon Answering Calls

A critical vulnerability in Telegram for Android allowed attackers to execute arbitrary code on a victim's device by answering a voice call, potentially enabling full system compromise. The flaw was patched in version 12.10.4 released in late September, with disclosure by security firm NebuSec on October 29.

A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec.

The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29.

Combined with an

Read original article