VDB

CVE-2021-31323

CVE-2021-31323 REJECTED

Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.

EPSS 0.48% · 65.3th percentile

Risk Scores

EPSS Score
0.48%
65.3th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSrlottie0.1+dfsg-2, 0
Ubuntu:Pro:20.04:LTSrlottie0~git20200305.a717479+dfsg-1, 0, 0~git20190721.24346d0+dfsg-2
Ubuntu:20.04:LTSrlottie0~git20190721.24346d0+dfsg-2build1, 0, *
Ubuntu:24.04:LTSrlottie0

Exploit Intelligence

Timeline

  • May 18, 2021 CVE Published
  • May 19, 2021 EPSS Score
  • Jul 22, 2021 EPSS Score
  • Sep 21, 2021 EPSS Score
  • Nov 22, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Mar 25, 2022 EPSS Score
  • May 25, 2022 EPSS Score
  • Jul 27, 2022 EPSS Score
  • Sep 26, 2022 EPSS Score
  • Nov 27, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›