Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

A vulnerability in the Android version of Telegram allowed attackers to execute code on a victim's device when the victim answered a voice call. The attack required only a standard Telegram account to be carried out. Telegram addressed the issue in version 12.10.4 of the app, which was released in late September. The security flaw was publicly disclosed by NebuSec on October 29. The vulnerability was present in every version of the app prior to the fix.