PT-2019-14598 · Telegram · Telegram

Dhiraj Mishra · Publicado 2019-09-11 · Atualizado 2021-10-18 · CVE-2019-16248

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Telegram versions prior to 5.11

Description The issue concerns the "delete for" feature, which does not properly delete shared media files from the Telegram Images directory on Android devices. This can lead to a misleading user interface indication that a sender has removed a recipient's copy of a previously sent image, when in fact the image remains accessible.

Recommendations For versions prior to 5.11, update to version 5.11 or later to ensure that the "delete for" feature functions as intended and properly removes shared media files from the Telegram Images directory.

Exploit

Correção

Identificadores relacionados

CVE-2019-16248

Produtos afetados

Telegram

Referências · 6

• 🔥 https://inputzero.io/2019/09/telegram-privacy-fails-again.html · Exploit
• https://github.com/RootUp/PersonalStuff/blob/master/Telegram_Privacy.pdf · Nota
• https://osv.dev/vulnerability/CVE-2019-16248 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2019/09/09/2 · Nota
• https://t.me/cvenotify/22174 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-16248 · Nota de Segurança