5.5 CVE-2021-31317

Exploit
 

Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's heap memory out-of-bounds on a victim device via a malicious animated sticker.
https://nvd.nist.gov/vuln/detail/CVE-2021-31317

Categories

CWE-843 : Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. Type confusion in CSS sequence leads to out-of-bounds read. Size inconsistency allows code execution, first discovered when it was actively exploited in-the-wild. Improperly-parsed file containing records of different types leads to code execution when a memory location is interpreted as a different object than intended.

References


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:* < 7.1.0
cpe:2.3:a:telegram:telegram:*:*:*:*:*:iphone_os:*:* < 7.1.0
cpe:2.3:a:telegram:telegram:*:*:*:*:*:macos:*:* < 7.1.0


REMEDIATION




EXPLOITS


Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
https://www.shielder.it/advisories/telegram-rlottie-vdasher-vdasher-type-conf...
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-s...
https://www.shielder.it/advisories/telegram-rlottie-vdasher-vdasher-type-conf...
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-s...


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry