VulnerabilityModified

CVE-2020-10570

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying.

MEDIUM 6.1EPSS 0.39%

Does this matter?

Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.

Description

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.

CVSS 3.1: 6.1 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS: 0.39% probability · 32th percentile
CISA KEV: Not listed
Affected: telegram/telegram
Source: cve@mitre.org

References

https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram:CVE-2020-10570Third Party Advisory
https://github.com/VijayT007/Vulnerability-Database/blob/master/Telegram:CVE-2020-10570Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.