A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim’s phone through a voice call, once the victim answered, according to security startup NebuSec.
The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29.
Combined with an
