CVE-2024-7014: Improper multimedia file attachment validation in Telegram for Android app
Published Jul 23, 2024
·Updated
EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting versions 10.14.4 and older.
Affected Software
2 affected components
Telegram Telegram for Android<=10.14.4
Telegram Telegram Android<10.14.5
Event History
Jul 23, 2024
CVE Published
via MITRE·09:55 AM
Data Sourced
via MITRE·09:55 AM
DescriptionWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-7014?
CVE-2024-7014 is classified as a critical vulnerability due to its potential to allow the execution of malicious applications.
2
How do I fix CVE-2024-7014?
To fix CVE-2024-7014, update your Telegram for Android application to version 10.14.5 or later.
3
Which versions of Telegram for Android are affected by CVE-2024-7014?
CVE-2024-7014 affects Telegram for Android versions 10.14.4 and older.
4
What types of attacks are possible with CVE-2024-7014?
CVE-2024-7014 allows attackers to send malicious applications disguised as videos, potentially compromising user devices.
5
Is there a workaround for CVE-2024-7014 if I cannot update Telegram?
As a temporary workaround for CVE-2024-7014, avoid opening suspicious video files received through Telegram until an update is applied.