Researcher demonstrates Telegram animated sticker code-execution chain on iOS

A security researcher presented at OffensiveCon Tokyo demonstrating how Telegram's animated sticker rendering library can be chained with server-side validation bypasses to achieve code execution on iOS with no user interaction required. Telegram has issued a position on the finding.

Detected & updated continuously · Source: Nebula