GCVE - cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*

part: a version: * update: *

Vendor	Telegram (`b9f5ed6a-4116-5a84-8f1b-e541cba3a9c1`)
Product	Telegram (`af2ee54b-0f3a-5198-8955-04c03dd0e40c`)
Edition	*
Language	*
Software edition	*
Target software	android
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-7014`	vulnerable	2026-06-08 06:58:21.061384	Improper multimedia file attachment validation in Telegram for Android app EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older. Published: 2024-07-23T09:55:42.837Z Updated: 2024-08-01T21:45:38.426Z Open on db.gcve.eu Reference links https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41861`	vulnerable	2026-06-08 05:35:21.200360	Details available The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. After approximately two to four uses of the self-destruct feature, there is a misleading UI indication that an image was deleted (on both the sender and recipient sides). The images are still present in the /Storage/Emulated/0/Telegram/Telegram Image/ directory. Published: 2021-10-04T02:58:42.000Z Updated: 2024-08-04T03:22:25.000Z Open on db.gcve.eu Reference links https://habr.com/ru/post/580582/ https://telegram.org/blog/autodelete-inv2/ru#avtomaticheskoe-udalenie-soobschenii https://desktop.telegram.org/changelog#v-2-6-23-02-21 https://pikabu.ru/story/konfidentsialnost_polzovateley_telegram_snova_narushena_predstaviteli_messendzhera_trebuyut_ne_raskryivat_podrobnostey_8511495	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36769`	vulnerable	2026-06-08 05:32:52.489812	Details available A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client. Published: 2021-07-16T23:03:50.000Z Updated: 2024-08-04T01:01:59.025Z Open on db.gcve.eu Reference links https://mtpsym.github.io	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31323`	vulnerable	2026-06-08 05:31:52.344408	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:43:27.000Z Updated: 2024-08-03T22:55:53.463Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-lottieparserimpl-parsedashproperty-heap-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31322`	vulnerable	2026-06-08 05:31:52.343960	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:43:37.000Z Updated: 2024-08-03T22:55:53.581Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-heap-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31321`	vulnerable	2026-06-08 05:31:52.343509	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31320`	vulnerable	2026-06-08 05:31:52.343169	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31319`	vulnerable	2026-06-08 05:31:52.342797	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31318`	vulnerable	2026-06-08 05:31:52.342314	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31317`	vulnerable	2026-06-08 05:31:52.341797	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31315`	vulnerable	2026-06-08 05:31:52.338772	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-27351`	vulnerable	2026-06-08 05:31:21.014781	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12474`	vulnerable	2026-06-08 05:17:58.240855	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-10570`	vulnerable	2026-06-08 05:16:35.310082	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16248`	vulnerable	2026-06-08 05:13:08.023397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.