Telegram widget engine hit by remote code execution bugs
Researchers say Telegram's new widget engine has shipped multiple RCEs on Android, iOS and Windows, with a macOS exploit expected.
Confirmed
- Researchers say Telegram's new widget engine has shipped multiple RCE bugs
- Code execution has been demonstrated on Android, iOS and Windows, per researchers
- A guide to avoiding the expected macOS exploit has been published
Not yet known
- Whether a macOS exploit will emerge; it is expected but not yet shown
- Whether Telegram has fixed the widget engine bugs
What we know
A researcher says code execution has been demonstrated across platforms and published a macOS mitigation. A news site summarises the findings.
How the story developed
Researchers say Telegram's new widget engine has shipped multiple RCEs on Android, iOS and Windows, with a macOS exploit expected.
Researchers say Telegram's new widget engine shipped several remote code execution flaws, demonstrated on Android, iOS and Windows.
What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“telegram has shipped multiple rces already in the new widget engine”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.