Full Disclosure mailing list archives

Multiple remote memory corruptions in Telegram's handling of animated stickers


From: polict of Shielder <polict () shielder it>
Date: Fri, 19 Feb 2021 10:01:45 +0100

I have recently found and reported 13 memory corruptions to Telegram
(https://telegram.org), you can find the just-published technical blog
post at
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/
and advisories at https://www.shielder.it/advisories/

The vulnerable official clients for android, ios and macos have already
been patched on september 30 and october 2, have a look at the blog post
for more details :-)

-- 
polict
Research team director @ Shielder Srl
polict () shielder it


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/


Current thread: