Type Confusion Vulnerability in Telegram's Custom Fork of Rlottie Library

CVE-2021-31317

What is CVE-2021-31317?

A vulnerability exists in Telegram for Android, iOS, and macOS versions prior to 7.1 that stems from a Type Confusion in the VDasher constructor of the rlottie library. This flaw allows remote attackers to exploit the application through specially crafted animated stickers, potentially leading to unauthorized access of heap memory on the victim's device. Such exploitation could facilitate a range of security risks, highlighting the importance of updating to the latest version to mitigate this issue.

References