Other nomination

Telegram anonymity fails in desktop - CVE-2018-17780

Dhiraj Mishra

Telegram's desktop and Windows Phone clients forced peer-to-peer calls with no setting to refuse them, so placing or answering a call exposed both parties' public and private IP addresses to each other. Anyone able to ring a user could therefore locate them; fixed in tdesktop 1.3.17 and tracked as CVE-2018-17780.

Record

Researcher

Dhiraj Mishra

In the archive

• Nominated for the 2018 Top 10 Web Hacking Techniques

Tags

• info-leak
• cve
• bug-bounty
• case-study

This page is the archive's own catalogue record. The research is the work of Dhiraj Mishra, first published at the original source. Preserved copies are kept so the citation survives its host.