CVE-2024-54916

MEDIUM

Telegram Android APK <11.7.0 - Privilege Escalation

Title source: llm
STIX 2.1

Description

An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.

Exploits (1)

nomisec WORKING POC
by SAHALLL · poc
https://github.com/SAHALLL/CVE-2024-54916

References (2)

Scores

CVSS v3 6.8
EPSS 0.0076
EPSS Percentile 73.4%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-863
Status published
Published Feb 11, 2025
Tracked Since Feb 18, 2026