First published: Tue Mar 24 2020(Updated: )
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Telegram Telegram | <=5.12.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Telegram vulnerability is CVE-2020-10570.
CVE-2020-10570 has a severity level of medium.
This vulnerability affects the Telegram application for Android versions up to and including 5.12.0.
This vulnerability allows physically proximate attackers to bypass restrictions on message reading and replying in the Telegram application for Android when the Show Popup feature is enabled.
At the moment, there is no known fix available for CVE-2020-10570. It is recommended to update to the latest version of Telegram when a fix becomes available.