CVE-2019-15514 Information disclosure in n/a
Attackers can discover private phone numbers of Telegram users despite privacy settings by exploiting group information features.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-15514?
CVE-2019-15514 is a medium-severity vulnerability in n/a, published on 23 Aug 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers.
Which versions are affected by CVE-2019-15514?
It affects 1 product.
Products include Telegram Telegram.
How do I fix CVE-2019-15514?
No fix has been published for CVE-2019-15514 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-15514 being exploited?
There is no known exploitation of CVE-2019-15514 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-263v-6w9h-xf97.