Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4gqj-v3rw-hwjg

Опубликовано: 16 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.6
CVSS3: 7.5

Описание

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.

EPSS

Процентиль: 43%
0.00501
Низкий

4.6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
nvd
10 месяцев назад

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.

CVSS3: 7.5
debian
10 месяцев назад

Telegram Desktop 2.9.2 contains a denial of service vulnerability that ...

CVSS3: 7.5
altlinux
около 5 лет назад

ALT-PU-2021-4969: package `telegram-desktop` update to version 3.0.0-alt1

EPSS

Процентиль: 43%
0.00501
Низкий

4.6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-770