A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec.
The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29.
The flaw can be triggered in every version from A flaw in Telegram for Android allowed an attacker to run code on a victim’s phone via a voice call once the victim answered, according to security startup NebuSec.
The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29.
The flaw can be triggered in every version from The Hacker News