PT-2020-6163 · Telegram+1 · Telegram Ios+4

Polict · Published 2020-09-30 · Updated 2021-05-25 · CVE-2021-31323

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Telegram Messenger versions prior to 7.1.0 Telegram Android versions prior to 7.1.0 (2090) Telegram iOS versions prior to 7.1 Telegram macOS versions prior to 7.1

Description The issue is caused by a heap buffer overflow in the LottieParserImpl::parseDashProperty function. This can allow a remote attacker to disclose protected information by using a malicious animated sticker, potentially accessing heap memory out-of-bounds on a victim device.

Recommendations For Telegram Messenger versions prior to 7.1.0, update to version 7.1.0 or later. For Telegram Android versions prior to 7.1.0 (2090), update to version 7.1.0 or later. For Telegram iOS versions prior to 7.1, update to version 7.1 or later. For Telegram macOS versions prior to 7.1, update to version 7.1 or later. As a temporary workaround, consider avoiding the use of animated stickers from untrusted sources until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2021-03325

CVE-2021-31323

Affected Products

Lottieparserimpl

Telegram Android

Telegram Messenger

Telegram Ios

Telegram Macos

References · 8

• 🔥 https://shielder.it/advisories/telegram-rlottie-lottieparserimpl-parsedashproperty-heap-buffer-overflow · Exploit
• 🔥 https://shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface · Exploit
• https://cve.org/CVERecord?id=CVE-2021-31323 · Security Note
• https://osv.dev/vulnerability/CVE-2021-31323 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03325 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31323 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31323 · Security Note
• https://ubuntu.com/security/CVE-2021-31323 · Vendor Advisory