CVE-2019-16248 The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that....
MediumCVSS 5.5
EPSS 0.44%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image (analogous to supported functionality in which a sender can remove a recipient's copy of a previously sent message).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Telegram | < 5.11.0 | 5.11.0 |
References
- github.com third-party-advisory
- www.inputzero.io exploit third-party-advisory
- www.openwall.com mailing-list third-party-advisory