Telegram for Android flaw ran code after a voice call was answered
Versions 8.6.2 through 12.10.3 were affected; 12.10.4, released in late September, fixes MediaState handling, and no CVE was assigned as of October 29.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #voice-calls
Signal fixes RingRTC flaw that can block hang-ups (CVE-2026-113380)
A remote peer can flood the call state machine so the microphone and possibly the camera stay on.