Vulnerability · NVD
CVE-2020-10570
MEDIUM 6.1
The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.
Attack vector : Physical
No privileges required
No user interaction
Show raw CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.39%
exploit very unlikely
percentile 31.8%
Tracked apps referencing this CVE
For each app: the affected range, the fixing version, and where the tracked app stands today.
Vulnerable CPE configurations (1)
| Vendor | Product | Platform | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| telegram |
telegram Android
|
Android | ≤5.12.0 | cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:* |