Lucene search

MitreCVE-2021-31318

HistoryMay 18, 2021 - 8:15 p.m.

CVE-2021-31318

2021-05-1820:15:07

CWE-843

mitre

web.nvd.nist.gov

cve-2021-31318

android

ios

macos

type confusion

rlottie

heap memory

out-of-bounds

animated sticker

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.

Affected configurations

Nvd

Node

telegramtelegramRange<7.1.0android

telegramtelegramRange<7.1.0iphone_os

telegramtelegramRange<7.1.0macos

VendorProductVersionCPE
telegramtelegram*cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*
telegramtelegram*cpe:2.3:a:telegram:telegram:*:*:*:*:*:iphone_os:*:*
telegramtelegram*cpe:2.3:a:telegram:telegram:*:*:*:*:*:macos:*:*

Vendor	Product	Version	CPE
telegram	telegram	*	cpe:2.3:a:telegram:telegram::::::android::*
telegram	telegram	*	cpe:2.3:a:telegram:telegram::::::iphone_os::*
telegram	telegram	*	cpe:2.3:a:telegram:telegram::::::macos::*

References

www.shielder.it/advisories/telegram-rlottie-lotcomplayeritem-lotcomplayeritem-type-confusion/

www.shielder.it/blog/2021/02/hunting-for-bugs-in-telegrams-animated-stickers-remote-attack-surface/

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

0.002

Percentile

53.5%

JSON

Related for CVE-2021-31318