CVE-2021-31322: Buffer Overflow
Last updated 24 July 2024
Other sources
Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Telegram issue?
The vulnerability ID for this Telegram issue is CVE-2021-31322.
What is the severity of CVE-2021-31322?
The severity of CVE-2021-31322 is medium, with a severity score of 5.5.
Which versions of Telegram are affected by CVE-2021-31322?
Telegram Android versions prior to 7.1.0 (2090), Telegram iOS versions prior to 7.1, and Telegram macOS versions prior to 7.1 are affected by CVE-2021-31322.
What is the vulnerability description of CVE-2021-31322?
CVE-2021-31322 is a Heap Buffer Overflow vulnerability in the LOTGradient::populate function of Telegram's custom fork of the rlottie library, which may allow a remote attacker to access heap memory out-of-bounds on a victim device via a malicious payload.
How can I fix CVE-2021-31322?
To mitigate CVE-2021-31322, it is recommended to update Telegram Android to version 7.1.0 (2090) or later, Telegram iOS to version 7.1 or later, and Telegram macOS to version 7.1 or later.