Authentication Bypass Vulnerability in Telegram Android by Telegram

CVE-2024-54916

What is CVE-2024-54916?

A vulnerability in the SharedConfig class of Telegram Android version 11.7.0 allows an attacker in physical proximity to exploit the application. By manipulating the return value of the checkPasscode method, the attacker can bypass authentication mechanisms, leading to potential privilege escalation. This poses significant security risks, as unauthorized access to user accounts may result in data theft and abuse of app functionalities.

References