CVE-2014-8688: Infoleak
Published Mar 14, 2017
·Updated
An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in cleartext in process memory and a .db file.
Affected Software
2 affected components
Telegram Messenger Iphone Os=2.6
Telegram Messenger Android=1.8.2
Event History
Mar 14, 2017
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-8688?
CVE-2014-8688 is considered a high severity vulnerability due to the exposure of secret chat messages in plaintext.
2
How does CVE-2014-8688 affect Telegram Messenger users?
CVE-2014-8688 allows attackers to access cleartext secret chat messages from the process memory and a database file.
3
What versions of Telegram Messenger are affected by CVE-2014-8688?
CVE-2014-8688 affects Telegram Messenger version 2.6 for iOS and version 1.8.2 for Android.
4
How can I mitigate CVE-2014-8688?
To mitigate CVE-2014-8688, users should upgrade to the latest version of Telegram Messenger that addresses this vulnerability.
5
What type of vulnerability is CVE-2014-8688 categorized as?
CVE-2014-8688 is categorized as an information disclosure vulnerability.