Telegram Android flaw lets attackers run code when users answer voice calls

According to NebuSec, a flaw in Telegram for Android allowed an attacker to run code on a victim’s phone after the victim answered a voice call. The flaw affected versions 8.6.2 through 12.10.3 and was fixed in version 12.10.4. The source does not confirm that the flaw was used in real attacks.