CVE-2023-34658 Other in n/a

What is CVE-2023-34658?

CVE-2023-34658 is a medium-severity vulnerability in n/a, published on 29 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Telegram v9.6.3 on iOS allows attackers to hide critical information on the User Interface via calling the function SFSafariViewController.

Weakness: CWE-1021

Which versions are affected by CVE-2023-34658?

It affects 1 product.

Products include Telegram Telegram.

How do I fix CVE-2023-34658?

No fix has been published for CVE-2023-34658 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-34658 being exploited?

There is no known exploitation of CVE-2023-34658 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2019-10044 Other in n/a High 8.8
• CVE-2018-20436 Server-side request forgery in n/a High 8.1
• CVE-2024-7014 Improper multimedia file attachment validation in Telegram for Android app High 7.1
• CVE-2021-31320 Memory corruption in n/a High 7.1
• CVE-2021-31321 Memory corruption in n/a High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6977-5wcp-rwxf.