Denial of Service Vulnerability in Telegram for iOS by Telegram

CVE-2021-30496

What is CVE-2021-30496?

The Telegram app version 7.6.2 for iOS contains a vulnerability that allows remote authenticated users to trigger a denial of service condition. This can occur when an attacker sends a specifically crafted message, potentially in languages like Persian, which when pasted into a channel or group by the victim, results in a crash of the application. The issue originates from the MtProtoKitFramework, although the vendor asserts that this behavior does not constitute a vulnerability.

References