SB2018122405 - Information disclosure in Telegram for Android
Published: December 24, 2018 Updated: August 15, 2020
Security Bulletin ID
SB2018122405
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2018-3986)
The vulnerability allows a local high-privileged attacker to obtain potentially sensitive information.
The vulnerability exists in the "Secret Chats" functionality of the Telegram Android messaging application due to leaving of behind photos taken and shared on the secret chats, even after the chats are deleted. A local attacker can gain access to potentially sensitive information from all applications installed on the Android device.
Remediation
Install update from vendor's website.