full-disclosure - [FD] Multiple remote memory corruptions in Telegram's handling of animated stickers

Open Source and information security mailing list archives

Message-ID: <a40f47d1-a332-e6ee-116e-282e3f083f8e@shielder.it>
Date: Fri, 19 Feb 2021 10:01:45 +0100
From: polict of Shielder <polict@...elder.it>
To: fulldisclosure@...lists.org
Subject: [FD] Multiple remote memory corruptions in Telegram's handling of
 animated stickers

I have recently found and reported 13 memory corruptions to Telegram
(https://telegram.org), you can find the just-published technical blog
post at
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/
and advisories at https://www.shielder.it/advisories/

The vulnerable official clients for android, ios and macos have already
been patched on september 30 and october 2, have a look at the blog post
for more details :-)

-- 
polict
Research team director @ Shielder Srl
polict@...elder.it


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives