Approved changes feed: RSS · Atom

cpe:2.3:a:telegram:telegram_desktop:1.3.14:*:*:*:*:*:*:*

part: a version: 1.3.14 update: *

VendorTelegram (b9f5ed6a-4116-5a84-8f1b-e541cba3a9c1)
ProductTelegram Desktop (298ff4b3-acf4-5b60-88a9-548cd82dcd54)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/telegramdesktop/tdesktop purl2cpe 2026-06-01 10:13:08.392290

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-17780 vulnerable 2026-06-08 05:11:06.708775 Details available
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
Published: 2018-09-29T19:00:00.000Z
Updated: 2024-08-05T10:54:10.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17231 vulnerable 2026-06-08 05:11:06.179598 Details available
Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary
Published: 2018-09-19T22:00:00.000Z
Updated: 2024-09-16T19:19:22.759Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.