{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Telegram for Android flaw let attackers run code when a victim answered a voice call · updates",
  "home_page_url": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026",
  "feed_url": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026/feed.json",
  "description": "NebuSec disclosed a flaw in Telegram for Android that let an attacker with an ordinary Telegram account run code on a victim's phone once the victim answered a voice call. The bug was in the code that parses MediaState call messages (mute, camera and video rotation state), which mishandled missing fields and read memory it should not. Versions 8.6.2 through 12.10.3 (March 2022 to September 2026) are affected; Telegram fixed it in 12.10.4, released in late September. NebuSec confirmed it in private calls on ARM64 phones and has no evidence it directly affects the iOS or desktop apps or group calls. There was no CVE identifier as of October 29.",
  "language": "en",
  "_pwn": {
    "slug": "telegram-android-voice-call-mediastate-rce-oct-2026",
    "severity": "high",
    "status": "live",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026#2026-10-29-d1311a21",
      "url": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026#2026-10-29-d1311a21",
      "title": "Telegram for Android flaw let attackers run code when a victim answered a voice call: NebuSec discloses the voice-call code execution flaw with a demo video; The Hacker News confirms the matching bug in Telegram's published 12.10.3 source.",
      "content_text": "Telegram for Android flaw let attackers run code when a victim answered a voice call: NebuSec discloses the voice-call code execution flaw with a demo video; The Hacker News confirms the matching bug in Telegram's published 12.10.3 source.\n\nSource: https://x.com/nebusecurity/status/2115601122727702634",
      "date_published": "2026-10-29T00:00:00.000Z",
      "external_url": "https://x.com/nebusecurity/status/2115601122727702634",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026#2026-09-25f7414e",
      "url": "https://pwn.watch/i/telegram-android-voice-call-mediastate-rce-oct-2026#2026-09-25f7414e",
      "title": "Telegram for Android flaw let attackers run code when a victim answered a voice call: Telegram for Android 12.10.4 ships the fix, reading the rotation value from the right field in MediaState call messages.",
      "content_text": "Telegram for Android flaw let attackers run code when a victim answered a voice call: Telegram for Android 12.10.4 ships the fix, reading the rotation value from the right field in MediaState call messages.\n\nSource: https://thehackernews.com/2026/10/telegram-android-flaw-lets-attackers.html",
      "date_published": "2026-09-01T00:00:00.000Z",
      "external_url": "https://thehackernews.com/2026/10/telegram-android-flaw-lets-attackers.html",
      "tags": [
        "high"
      ]
    }
  ]
}