CVE-2024-7014

Improper multimedia file attachment validation in Telegram for Android app

CVSS 7.1 HIGHEPSS 1.3%CWE-20

EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Affected products

Want to know if your infrastructure is exposed to this?

References