Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

Summary

A flaw in Telegram for Android allowed an attacker to run code on a victim's phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29. The flaw can be triggered in every version from

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.