CVE-2024-7014highobserved exploitationCWE-20

CVE-2024-7014: high-severity vulnerability in Android Telegram for Android

Improper multimedia file attachment validation in Telegram for Android app

Published 23 Jul 2024 · Updated 01 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 7.1epss 1.4%

from disclosure to weapon236 days

Published on NVDJul 23

1st PoC+236d

VulnCheckJul 22

EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Affected products

public PoCs found — 1

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References