This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-12474 →
DEBIAN-CVE-2020-12474
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a...
Original description
The description as published by the source.
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
telegram-desktop
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+ds-1"}]}]
Debian:14
telegram-desktop
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0+ds-1"}]}]
References
- advisory security-tracker.debian.org