OVERCLOCK.news
security

Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim…

BlueskyXRedditMail
Revised 1 change recorded since we first saw this
Feedburner.Com 2 versions
  1. Current Summary changed

    2 new sentences, beginning: “A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice…”

    Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

    A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29. Combined with an

  2. As first published

    Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

    A flaw in Telegram for Android allowed an attacker to run code on a victim's phone via a voice call once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29. The flaw can be triggered in every version from

Read the current version at Feedburner.Com →

Versions are compared on the headline and summary the publisher puts in their feed. An edit to the body of an article that leaves both untouched will not appear here.

Why am I seeing this Ranked on source trust — Feedburner

It ranks mainly on source trust: Feedburner is the most reliable outlet we track on this subject, and is the only one on the story so far.

Single-sourced. No second organisation has confirmed it yet.

Link-outLink-out, because only one organisation carries it and no first-party source is on it and the subject could not be identified from the text. Link-out means we point at the publisher and say nothing of our own.

Blended score 0.381 — every figure below is computed, none of it is editorial.
FactorWeightScore ContributionWhere it came from
Corroboration 0.35 0.39 +0.135 35% 1 independent org on the story. Tier-3 aggregators never corroborate — they can show something is circulating, never that it is true.
Source trustleads 0.25 0.65 +0.163 43% Feedburner is the highest-trust source on this story. Trust is taken from the best source, not averaged.
Pickup rate 0.20 0.00 +0.000 0% One counted organisation, so there is no spread to measure — nothing has picked this up to set a rate.
Freshness 0.20 0.42 +0.084 22% Halves every 10 hours from the newest item on the story. This is the only factor that rewards a story for nothing more than being recent.

Corroboration counts distinct organisations, once each, and only from tiers 1 and 2. Freshness halves every 10 hours, so this ranking is a snapshot and will differ at the next build.

Read the full article at Feedburner →

What happened

A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29.

1independent orgs
38story score
0velocity
65source trust
30passes seen

How this story arrived

Ordered by when each source was first observed, which is what the velocity figure is computed from. Publishers backdate; observed order does not.

  1. 01 Feedburner first seen Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls

Overclock clusters coverage from independent sources and grades it automatically. The figures above are computed, not editorial. This page summarises and links to reporting by the outlets named — follow the links for the original work.