CVE-2026-111105

Name of the Vulnerable Software and Affected Versions Telegram (affected versions not specified)

Description A numeric truncation issue exists within the rlottie library used by Telegram. The flaw stems from improper validation of user-supplied data, which can lead to a write operation occurring before the start of an allocated buffer. A remote attacker can exploit this to execute arbitrary code in the context of the current process. Successful exploitation requires user interaction, such as visiting a malicious page or opening a malicious file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.