Security2 hOctober 29, 2026, 18:39

Telegram Android flaw let attackers run code on answered voice calls

A flaw in Telegram for Android allowed an attacker to execute code on a victim's phone once a voice call was answered, according to NebuSec. Only an ordinary Telegram account was needed; Telegram fixed the issue in version 12.10.4 in late September, and NebuSec disclosed it on October 29.

The Hacker News

Open source

Telegram Android flaw let attackers run code on answered voice calls

Attack triggered when a victim answered a Telegram voice call
Only a regular Telegram account was required
Fixed in Telegram 12.10.4 in late September
NebuSec disclosed the flaw on October 29

#Telegram#Android#NebuSec

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Security

One AI model generates trillions of variants of voice assistant attacks

Software

MCP servers answer nonexistent tool calls in three different ways

Business

Telegram Android flaw let attackers run code on answered voice calls

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

One AI model generates trillions of variants of voice assistant attacks

MCP servers answer nonexistent tool calls in three different ways

Test of 100 x402 sellers: 87% of paid calls returned real answers, but almost no buyers