Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-7014

July 23, 2024, 10:15 a.m.

Product(s) Impacted

Telegram for Android

  • 10.14.4 and older

Description

EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.

Weaknesses

CWE-20
Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE ID: 20

Date

Published: July 23, 2024, 10:15 a.m.

Last Modified: July 23, 2024, 10:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

security@eset.com

References