SecuritySpace - CVE-2021-31322

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2021-31322

Description: Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of- bounds on a victim device via a malicious animated sticker.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-31322
https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-heap-buffer-overflow/
https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/

CVE ID:	CVE-2021-31322
Description:	Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of- bounds on a victim device via a malicious animated sticker.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2021-31322 https://www.shielder.it/advisories/telegram-rlottie-lotgradient-populate-heap-buffer-overflow/ https://www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/