Odaily Planet Daily News ESET researchers discovered a zero-day vulnerability for the Android version of Telegram, which was sold for an unspecified price in an underground forum post on June 6, 2024. By abusing the vulnerability named EvilVideo by the ESET research team, attackers can share malicious Android payloads through Telegram channels, groups, and chats and make them appear as multimedia files. It is reported that the vulnerability only applies to Android Telegram versions 10.14.4 and earlier. After the ESET research team reported it to Telegram, the vulnerability was fixed on July 11, 2024. Telegram released version 10.14.5 on July 11 and notified the ESET research team by email.
See original
ESET discovers Android zero-day vulnerability that allows sending malicious files disguised as videos
Disclaimer: Includes third-party opinions. No financial advice. May include sponsored content. See T&Cs.
Replies 0
