CVE-2021-41861

Katalog CVE

CVSS 3.3 · Low EPSS 0,33%

Kerentanan pada telegram. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

The Telegram application 7.5.0 through 7.8.0 for Android does not properly implement image self-destruction, a different vulnerability than CVE-2019-16248. After approximately two to four uses of the self-destruct feature, there is a misleading UI indication that an image was deleted (on both the sender and recipient sides). The images are still present in the /Storage/Emulated/0/Telegram/Telegram Image/ directory.

Rincian

Terbit di NVD

4 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://desktop.telegram.org/changelog#v-2-6-23-02-21 release notes · advisory vendor
• https://telegram.org/blog/autodelete-inv2/ru#avtomaticheskoe-udalenie-soobschenii advisory vendor
• https://habr.com/ru/post/580582/ advisory pihak ketiga
• https://pikabu.ru/story/konfidentsialnost_polzovateley_telegram_snova_narushena_predstaviteli_messendzhera_tre... advisory pihak ketiga