Description
Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Telegram | Telegram Desktop | 2.9.2 | — |
References
- ExploitDB-50247 exploit
- Official Telegram Homepage product
- VulnCheck Advisory: Telegram Desktop 2.9.2 - Denial of Service (PoC) third-party-advisory