Cleartext Storage Vulnerability in Telegram Messenger for iOS and Android
CVE-2014-8688

7.5HIGH

Key Information:

Vendor

Telegram

Status
Messenger
Vendor
CVE Published:
14 March 2017
đź”” Create Telegram Vulnerability Alert

What is CVE-2014-8688?

A vulnerability has been identified in Telegram Messenger versions 2.6 for iOS and 1.8.2 for Android, where secret chat messages are stored in cleartext format within the process memory and a database file. This could allow unauthorized access to sensitive information, potentially compromising user privacy and data security.

References

https://blog.zimperium.com/telegram-hack/
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.