Telegram Android voice call flaw enables remote code execution

A code execution vulnerability in Telegram for Android allowed attackers to run code on victim phones via voice calls. The attacker needed only a regular Telegram account to trigger the flaw when a user answered the call. Telegram patched the issue in version 12.10.4 released in late September and security firm NebuSec disclosed it on October 29. Users should update to version 12.10.4 or later immediately.