Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ne555

#52882of 53,622
3.3Total CVSS
Vulnerabilities · 1
PT-2021-23433
3.3
2021-10-04
Telegram · Telegram · CVE-2021-41861
**Name of the Vulnerable Software and Affected Versions** Telegram versions 7.5.0 through 7.8.0 **Description** The issue concerns the improper implementation of the image self-destruction feature. After using the self-destruct feature several times, the UI may incorrectly indicate that an image has been deleted, when in fact the image remains present on the device in the /Storage/Emulated/0/Telegram/Telegram Image/ directory. This affects both the sender and recipient sides in private and group chats. **Recommendations** For versions 7.5.0 through 7.8.0, as a temporary workaround, consider manually checking the /Storage/Emulated/0/Telegram/Telegram Image/ directory for remaining images after using the self-destruct feature. Restrict access to this directory to minimize the risk of unauthorized image access until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.