Message Reading and Reply Bypass in Telegram for Android by Telegram
CVE-2020-10570

6.1MEDIUM

Key Information:

Vendor

Telegram

Status
Telegram
Vendor
CVE Published:
24 March 2020
đź”” Create Telegram Vulnerability Alert

What is CVE-2020-10570?

The Telegram application for Android, up to version 5.12, has a vulnerability where enabling the Show Popup feature could allow attackers in close proximity to bypass restrictions on reading and replying to messages. This potentially compromises the application's intended security measures, particularly the passcode feature, as unauthorized access to sensitive messages may occur.

References

https://github.com/VijayT007/Vulnerability-Database/blob/...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.