
Researcher claims new zero-click Telegram sticker bugs can run code on iOS
Aziz says logic flaws bypass server checks Telegram cited against rlottie bug CVE-2026-111105; no public proof or patch.
3 stories, newest first · one card per story

Aziz says logic flaws bypass server checks Telegram cited against rlottie bug CVE-2026-111105; no public proof or patch.
ZDI discloses a user-interaction Telegram rlottie RCE tracked as CVE-2026-111105.
ZDI disclosed CVE-2026-91826, a stack-based buffer overflow in Samsung's rlottie animation library enabling remote code execution, rated CVSS 7.8.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views