Key Takeaways
CertiK has reported a high-risk vulnerability in Telegram that could allow for remote code execution attacks;
The vulnerability is found in the media processing system of the Telegram Desktop application and can be exploited via specially crafted media files;
To safeguard against potential attacks, Telegram users are advised to disable the auto-download feature for media files across all chat types.
A serious vulnerability has been detected within Telegram.
As detailed by CertiK, a blockchain security firm, this flaw leaves users susceptible to remote code execution (RCE) attacks via the Telegram Desktop application’s media processing system.
Did you know?
Want to get smarter & wealthier with crypto?
Subscribe – We publish new crypto explainer videos every week!
This vulnerability can be exploited by transmitting specially crafted media files, including images and videos. Such attacks could allow hackers to execute malicious code on a user’s device remotely, compromising personal data and privacy.
To reduce the risk of falling victim to these attacks, CertiK recommends turning off the auto-download feature for media files.
Users can achieve this by going to “Settings,” selecting “Advanced,” and then proceeding to the “Automatic Media Download” section. Here, they should ensure that the auto-download options for “Photos,” “Videos,” and “Files” are turned off for all types of chats, including private conversations, groups, and channels.
This warning serves as a reminder of the constant necessity for both users and developers to remain cautious against security threats.
It is not the first time that Telegram has been at the center of similar situations regarding security. Recently, a security breach of the platform’s trading bot, Solareum, has led to its closure.
Having completed a Master’s degree in Economics, Politics, and Cultures of the East Asia region, Aaron has written scientific papers analyzing the differences between Western and Collective forms of capitalism in the post-World War II era.With close to a decade of experience in the FinTech industry, Aaron understands all of the biggest issues and struggles that crypto enthusiasts face. He’s a passionate analyst who is concerned with data-driven and fact-based content, as well as that which speaks to both Web3 natives and industry newcomers.Aaron is the go-to person for everything and anything related to digital currencies. With a huge passion for blockchain & Web3 education, Aaron strives to transform the space as we know it, and make it more approachable to complete beginners.Aaron has been quoted by multiple established outlets, and is a published author himself. Even during his free time, he enjoys researching the market trends, and looking for the next supernova.
