Critical Telegram Zero-Click Vulnerability Rated 9.8/10
A security researcher discovered a near-maximum severity zero-click exploit in Telegram animated stickers that can execute code on iOS without any user interaction, despite Telegram's earlier claims of server-side validation.
What we know
An account on X raises the alarm on researcher Saifeldeen Aziz's discovery of a zero-click vulnerability in Telegram's animated stickers rated 9.8 out of 10 — nearly the highest possible severity. The exploit works on iOS and doesn't require the user to open the sticker. Aziz claims he bypassed Telegram's server-side checks, and that the flawed code still ships in current apps. This is notable because Telegram had previously stated in March that its servers validate every sticker. The tweet reached 332 likes and 26,626 views, making it one of the most widely-seen security disclosures in the digest.
By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.