GCVE - cpe:2.3:a:telegram:telegram:*:*:*:*:*:iphone_os:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:telegram:telegram:*:*:*:*:*:iphone_os:*:*

part: a version: * update: *

Vendor	Telegram (`b9f5ed6a-4116-5a84-8f1b-e541cba3a9c1`)
Product	Telegram (`af2ee54b-0f3a-5198-8955-04c03dd0e40c`)
Edition	*
Language	*
Software edition	*
Target software	iphone_os
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-36769`	vulnerable	2026-06-08 05:32:52.490832	Details available A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client. Published: 2021-07-16T23:03:50.000Z Updated: 2024-08-04T01:01:59.025Z Open on db.gcve.eu Reference links https://mtpsym.github.io	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31323`	vulnerable	2026-06-08 05:31:52.344432	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:43:27.000Z Updated: 2024-08-03T22:55:53.463Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-lottieparserimpl-parsedashproperty-heap-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31322`	vulnerable	2026-06-08 05:31:52.343981	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:43:37.000Z Updated: 2024-08-03T22:55:53.581Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-heap-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31321`	vulnerable	2026-06-08 05:31:52.343531	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:43:44.000Z Updated: 2024-08-03T22:55:53.529Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-gray_split_cubic-stack-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31320`	vulnerable	2026-06-08 05:31:52.343190	Details available Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim device via a malicious animated sticker. Published: 2021-05-18T19:44:14.000Z Updated: 2024-08-03T22:55:53.487Z Open on db.gcve.eu Reference links https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/ https://www.shielder.it/advisories/telegram-rlottie-vgradientcache-generategradientcolortable-heap-buffer-overflow/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31319`	vulnerable	2026-06-08 05:31:52.342821	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31318`	vulnerable	2026-06-08 05:31:52.342337	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31317`	vulnerable	2026-06-08 05:31:52.341823	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31315`	vulnerable	2026-06-08 05:31:52.338817	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30496`	vulnerable	2026-06-08 05:31:51.082727	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12474`	vulnerable	2026-06-08 05:17:58.241736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.