{"id":"CVE-2024-7014","details":"EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting \n versions 10.14.4 and older.","modified":"2026-04-12T17:29:16.270596Z","published":"2024-07-23T10:15:02.320Z","references":[{"type":"ADVISORY","url":"https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/drklo/telegram","events":[{"introduced":"0"},{"fixed":"5fa5549a4a7f48476be29cc0facf68990ea10f62"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"10.14.5"}]}}],"versions":["release-10.0.0_3793","release-10.1.0_3919","release-10.13.1-4845","release-10.14.3-4927","release-10.2.0_4056","release-10.2.2_4071","release-10.2.3_4075","release-10.3.2-4145","release-10.5.0-4228","release-10.6.1-4275","release-10.9.1-4464","release-5.13.0_1818","release-5.13.0_1819","release-5.13.0_1820","release-5.13.0_1821","release-5.13.0_1823","release-5.13.1_1826","release-5.13.1_1829","release-5.14.0_1846","release-5.14.0_1849","release-5.14.0_1851","release-5.15.0_1864","release-5.15.0_1866","release-5.15.0_1867","release-5.15.0_1868","release-5.15.0_1869","release-6.0.0_1908","release-6.0.1_1910","release-6.0.1_1911","release-6.1.0_1938","release-6.1.0_1940","release-6.1.0_1941","release-6.1.1_1945","release-6.1.1_1946","release-6.2.0_1984","release-6.2.0_1985","release-6.2.0_1986","release-6.2.0_1988","release-6.3.0_2040","release-6.3.0_2042","release-7.0.0_2060","release-7.0.0_2061","release-7.0.0_2064","release-7.0.1_2065","release-7.1.0_2090","release-7.1.0_2092","release-7.1.1_2094","release-7.1.1_2096","release-7.1.2_2098","release-7.1.3_2100","release-7.1.3_2103","release-7.2.0_2128","release-7.2.0_2134","release-7.2.1_2135","release-7.2.1_2136","release-7.2.1_2137","release-7.2.1_2139","release-7.3.0_2195","release-7.3.0_2196","release-7.3.0_2197","release-7.3.0_2206","release-7.4.0_2221","release-7.4.0_2223","release-7.4.1_2225","release-7.4.2_2227","release-7.5.0_2243","release-7.5.0_2244","release-7.5.0_2245","release-7.5.0_2246","release-7.6.0_2264","release-7.6.1_2274","release-7.7.0_2284","release-7.7.1_2291","release-7.7.2_2293","release-7.8.0_2360","release-7.8.1_2372","release-7.8.2_2376","release-7.9.0_2384","release-7.9.1_2387","release-7.9.2_2389","release-7.9.3_2390","release-8.1.1_2431","release-8.2.1_2462","release-8.4.1_2522","release-8.5.0_2547","release-8.5.1_2551","release-8.5.2_2563","release-8.5.3_2565","release-8.5.4_2566","release-8.6.0_2587","release-8.6.1_2594","release-8.6.2_2600","release-8.7.0_2622","release-8.7.1_2629","release-8.7.2_2634","release-8.8.2_2702","release-8.9.0_2751","release-9.0.0_2799","release-9.1.0_2885","release-9.2.1_2962","release-9.3.0_3021","release-9.3.3_3026","release-9.4.0_3098","release-9.4.1_3102","release-9.4.2_3106","release-9.4.3_3138","release-9.4.5_3152","release-9.4.6_3155","release-9.4.7_3160","release-9.4.8_3161","release-9.5.0_3195","release-9.5.1_3199","release-9.5.3_3213","release-9.5.4_3227","release-9.5.5_3236","release-9.5.7_3249","release-9.6.0_3319","release-9.6.6_3362","release-9.7.6_3721"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7014.json","vanir_signatures":[{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Components/ThanosEffect.java"},"id":"CVE-2024-7014-04eac9fb","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["116153552364089145832468711100348456969","262381178556797944089370697444771432916","250378107413478162310339113347210040991","92995683534045592897776585063418187729","178397086611936442180560849249417834796","96698496417486007181958101923838768044","288280906352214331147356502755824695677","204619638788731101461284926620355816073","53998401480377731930883696308817320111","130058419469087672401226392412547332988","125178434309694286314790136854657741643","269291404562105824919683168508337782476","147859297437337314316549615542089704864","289290176049895535084238651817884111398","112894440060896399432536411166892825964","161065598680458806468863299534998870301","230386507306186051698304094144939772987","159641918381661000583983002262429943339","100648361613776032994018610219629724293","262809336945791201193421929257088542657","283030694805101076776281897524257189803","69810255574218227228768639244606003328","285129632334450599004903787674558386983","30063755100639881881628891309255909244","65253358985259855332612743021230000117","21705801669277324256789915999720781864","305180095514303012711935021012197415653","129197727862798385484332199471122390622","204893964924547812227738177102891028755","273125395061726522968982480925318661090","180619244308017652997435858749063143053","159279681865540429901616725030837522580","145208350551366801797029488184364651090","11481655089722412877568486716559760681","58576293952144390693339590254814165560","254614260186332021312074906847614925259","255831918728648207526644153924167883951","249892519644229140520434154264909306633","147790031800206009631656175129701810971","1394327752810625795333936041968685629","61796689714325566566160719489103750701","47457986886018583601387520868658344623","334576140907800048438221367041743887059","59394517799774506293455508199483952784","105768264142797110047972045727883267484","32598668102491647859635184931104991275"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotBiometry.java","function":"updateToken"},"id":"CVE-2024-7014-0b0c8f07","signature_version":"v1","digest":{"function_hash":"288018105336075887222001330783970421248","length":927}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"startOpenAnimation"},"id":"CVE-2024-7014-0c3db7ab","signature_version":"v1","digest":{"function_hash":"334059159689506658714572784410555635825","length":3163}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"instantClose"},"id":"CVE-2024-7014-15f24ddc","signature_version":"v1","digest":{"function_hash":"83333907562191608866379854377273564134","length":986}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/CachedMediaLayout.java"},"id":"CVE-2024-7014-1c616018","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["130972544407297226519642318656255716097","203751517040473957140001521776536162410","173819854123360791737578948985043554101","60194039905769267956298045988579237689"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Components/ThanosEffect.java","function":"init"},"id":"CVE-2024-7014-20c16471","signature_version":"v1","digest":{"function_hash":"146680326107426020755568439888856553333","length":4134}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java"},"id":"CVE-2024-7014-25df7739","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["314249070695445727358069655468660742857","264158061858993335216003519562919330267","65022222163336329440884740989575718214","260220373729812229847445150483429161333","282325033982033561448554079017205814448","285916219110632067430091002939726758003","243030850828160620976782911629460123565","8425357875171116889331608249322265411","202080160096962848783916688453401876685","205465910837090670759675308075797351706","290309123660956516373482028596963684722","313296023482871105484063616014557119116","122386783136216986068295664135989071116","330261556048460420185855219363960929500","168965441258923932006247693340379182854","118861274074915393532144761729873902786","133788643171636978737481852785748837234","330459977721705129629014018990115754297","135078598902080459808969810418553053259","299439300084731655234023403329247787441","200807098755052828789823589790748029658","199978842570102924488973754905083306372","50967796619129268859118384316989403364","333496552144572356609394216123900624148","252927705090591500926811964921713686608","45149313827970080232401452170901014474","141369868306139729651942664112835517673","137788009438310977753885536833312884950","107151110824560467917080918873348300830","155274723519774800944195168707177258969","169594520319663036480611376675257604403","219666192446339215914804453362031127770","188026632425595224349641326121248949058","190187892348817837326672349277599840931","81290146687865104853350832468490449430","18786335516249058046756190750174562631"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotBiometry.java"},"id":"CVE-2024-7014-2b0a222f","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["3292274363491299410754467201273202630","304592907735517744491370385106292401856","257965307818819923341803738243262563425","46692761028532783366874228812745427857"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/StarsController.java","function":"payAfterConfirmed"},"id":"CVE-2024-7014-2c23dacd","signature_version":"v1","digest":{"function_hash":"146889882458841846878635668935372436649","length":4505}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java"},"id":"CVE-2024-7014-34400101","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["235565330648522669111326824632477958473","280056913060526120254001968557543751496","320044539872375286710453382929851359846","56948215053808622835701348279629928096","117535045206337236413505841061405003350","236698131494053067468322237460876469287","98156442505580144109042153105973721503","284410382130777409336675947982796897106","132747283493903490699002501941168159853","226466395287653838205743509677953435020","91863911447293547907446749680916505433","301232557176512645775478630154706148270","32308349784831072766049396933797390639","116982383237322092373327254671471377307","134859159236062311906620730672695909155","159846963330207845274443281217519924342","286889059926820163291848395895496612943","287865492319457574661750870894182306557","119755539969884828919391931782552920522","10056333434727651187742148177962272649","240102972024497592441839014645047387207","320952207382351327683145729163688678638","62218145418833578673631064760128970169","268949436662298966021607009984641739318","264794583413679598890496913526639742552","41528117891035099828154330242451574038","179931261999747702270876188011898675755","191317964928103658588266214492547841716","169613835479085147911670011927982136763","65593036292269398984253843379893075371","63199628900918613912028126719354632688","112328227845315213473008588037403597214","85226954512790615503544518873745815933","12169647613855797889477940674315084657","122730341052990399792996447570551189780","151265857866205921956398367963279951054","3416214309039192342630789936361045299","212204347673987513089286771186019161529","200125200277060629271477030170765592889","124533905493561094117890953665608166733","222613744334369697072787196631308639341","278516088620024282938952774660949335982","286032445626106516795758569326076186941","268192010598472670536673134783257794251","165795032270052674571235920425074821653","171525385904543153098972158804914763951","65593036292269398984253843379893075371","63199628900918613912028126719354632688","112328227845315213473008588037403597214","275156333335444479845609373660276512593","69940628768703412709504978198994914928","254898745787167262212303588398434853399","79789586386481157071705490124562766146","232005954959687208480302369597639418948","233663698126967642452520047093920764319","53746847935433336872517296986585712907","260050504804214929961604691027029751796","108773651087829728975896154190606037927","209525740189684853551211589243996964044","222064617277204735297811073282567162763","93850042108725678782699226946560374843","153335540339730431019706292027366028037","7236720603716944095823409200844498727","91863911447293547907446749680916505433","153315678275994002621766917387925985099","39800236557057694094433791891047375114","239263070402658134163827627232552523459","133303633677824309538700308133998526168","48340123038806085156576873191760069416","61246807661904294332018440975624782550","306633802861618896775048591392127764117","287951442638135168542819405745846506498","144278410448948431543701041550946312142","257683349192342252245194778190342239068","193244414502421451339874574861071174338","1030639369531153543485637218370617365","76984486088550036737133702651589789445","288267280093809512410942028371769640654"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChatActivity.java","function":"didPressImage"},"id":"CVE-2024-7014-34b984cf","signature_version":"v1","digest":{"function_hash":"83535893737142795773699800990041186102","length":5724}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChatActivity.java"},"id":"CVE-2024-7014-388baca8","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["151846093084852393082243971974559248003","244479970019521565229732475733795992328","142118617494796249829484148349653624678","61145525338436141329100790468763875604","21804210187211851348958639362819327017","61002908547579359798622887502363746949","286889433377946330103411584929329731344","192071793236078802875983076486164474792","236483033025245522254831350093066236508","45093722929233508535142631309318820731","184466684993814292700296034645473101245","322655765294891427180628232373370331057","133993981373430466468588590729225206016","211772859664237095767270341818203124022","227133299859669746583622159656441609456","132174645217632765505776443377911419911","163560389577108761856866461972724157492","311923124401808380511770658188569568243","33267621639028933122074058812982030483","34701936810621170160898124782792378953"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessagesController.java","function":"onMessagesLoaded"},"id":"CVE-2024-7014-3947525a","signature_version":"v1","digest":{"function_hash":"141061016791167659132721792214203706398","length":117}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"setSelfStoriesViewsOffset"},"id":"CVE-2024-7014-3b56e486","signature_version":"v1","digest":{"function_hash":"189334698287164850007311648583047105362","length":194}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java"},"id":"CVE-2024-7014-3c979216","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["99086378521541915575473058120454872838","105800653925823753992911443454080788428","251906632926601734032394840339511516776","91180773139166766257818948960351997194","314954444911080158757716595559437478870","143357657578968677407712266656090791355","219673313421742212582432910026684073398","291897489097628391503335330860491588089","222502803697642867945715910206847784487","107957769827405759277907169960708631745","336841014691589681027307585146538445974","269843417427251547817811592097266473559","221410892119512063460484151974535383267","219777611424157961786908166904080986841","45744445241180372194729647661664129653","216877195427969797140905210070475583439","23673233039401052109744395354873175069","301401049035545522293689375938114979776","259108086111368504761145217750920700996","339454767228753246933208247383334920373","196023615012083740665761012568983465768","304836439778361218888864504448697378118","280550419349599513070941328309935743254","271998579436901002517878805489778799792","237676687120651127006592481994009335000","65997709860756948234996095104024649541","308629759630181585242066968832061148612","1447044421625043905154585890294128514","276437255977566087449495076908225796077","215257929690729582323104082818477854462","227645167010321975058611110018434979671","64843108046845089276592645317126135364","260440767125140923336400264495123880671","103140101531790081869962171730160725137","21643290021540296917165401552035719852","77510207251414451600272655558600500830","229262352857212386716990801546208172490","140619242182977645181417000181352372937","211019284815133952702688628984915587293","652335160936373230177741197007441970","269780906811785518194807745627650240898","309556810781937461379007761209491676701","305811725206167845287096299026213845723","43742717882415478263267011950243965237","256324620155425590044247565874898845538","276477079184972855475091577780415761615","173281007855555421879205247173005403547","269033467595196543997510692880395246120","80995165382664367049913005638298474310","223861878227159599016429290030207314210","67934515226676106531984532244963205993","196289606579820635757646820787502172483","113493292718197946631287487978589739278","337037998436771243259262872524795785087","332555747156664638340399801886893686507","196094380992294289097397743090394830124","25448973763383765017950084353210301857","242954964383920431807685754789535721524","9748430647050186926892821492499826235","69670703779787450853383759226103825647","164802703954637608957327268622281635453","6328794217859270875057204854215577890","296205163919532535699628210609610466040","137531649143586001703402598474575960368"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/AndroidUtilities.java"},"id":"CVE-2024-7014-3e42d346","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["178224241346259155335524221769672817270","249470768771633378316734118728782586099","43246518498582748898546893765739108103","152588086142164875832722672250331306328","141230152444694645772592203357823900799","74265892620319619344052668800076621826","130180214527240144827045494279035479537","324224684545498081465571163424430706795","189424546389846497736183932150071922079","75749069026738993277967258685871045230","171460092740129342067286091954838890325","43643758350948569784514352607896212892","154098069040952867535531150866629554917","273558693345595415768279048504511752386","51805366548347090752089740123485432921","84133340430903920545438408359788274941","163064999747018220436832294096041965656","210993186347429785375706786536339719441","243067698686522139593370647886240361866","314273068939648939489198357122874706946","187477331096049282015958784299128931024","40805643429333144859642994450927776524","128278670336090174390027014926995277534","170320431453417493391206482590418649799","72437240176028585721924548378946533434","207672723741273614095077840429088004531","220217345283803642129901676027669814688","81834459628801177465450232758427108900","61542660526532689194269445924428196656","33237449476831625086746414423232733679","22253382026054466084149141903326478660","253498846859968580873711454896401368279","303750070128611940860187946239619453302","151167422968261012190646113993489031257","222309686967470110478782977918019923184","200899854747610376677602807274079733924","127282911230686424951216675008787809697","29419559728412746205756928814112626230","152441724593026836275832446203275716816","15524327558226238636683064349210110385","187400916176955231055921504745277184918","228299181740075076178334488541136101587","185075445936586806734951680288761580434","7143212128064351805608915166570917725","288047251789676899519233875523790105082","304604452685489579517022973344114158821","63649519916045268323920063305307058293","128810934877326369029902385579051960265","269060031664711354738317223117370879162","233819490760054833560690535833391611045","306924452783891522107425061144793377679","19996188018851759346735898243263769852","273712498052835576992132845733117759419","292253629360405877668092913708541137937","148162638386488147508405842668909401718","109180309512896580676373914965271622864"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelAdminLogActivity.java"},"id":"CVE-2024-7014-3efa5a2c","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["222997301439093855984475139947280177187","320228374873046189622956544459192222632","168048568580829022464302076423388760996","139669168938132051859550662366822067442"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"startCloseAnimation"},"id":"CVE-2024-7014-452c7579","signature_version":"v1","digest":{"function_hash":"303008380970805978110611783558714614833","length":2635}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotWebViewSheet.java"},"id":"CVE-2024-7014-457dbaa5","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["338143842127385535595142896922771654128","34853803070045259286898791664188008585","63357101048940592804228463804720314581","123855762638513358491306048977281974377","38247003975061620764736634142536783480","260352638264223882317685933886789966919","315795620340499086048338255097900141931","23428594796513948413913599514116389511"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/LocaleController.java"},"id":"CVE-2024-7014-47f32456","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["145028018838768718877960325210322473353","107425274913492168891740620573471845503","265619157837563962886830342680547642574","23228243148568265705004952246132025508","239840254705457836601989714497115419914"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessagesController.java","function":"checkCanOpenChat"},"id":"CVE-2024-7014-4c56a165","signature_version":"v1","digest":{"function_hash":"328983702256029925513066259584485929564","length":2647}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Cells/ChatMessageCell.java"},"id":"CVE-2024-7014-51cea2d2","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["167582712769697966448642206288854273218","129495205478976256237626091275390484069","319225222369459266888745752403994114162","146651212254979949003499421869585221335"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/StatisticActivity.java","function":"updateData"},"id":"CVE-2024-7014-52ffa3c1","signature_version":"v1","digest":{"function_hash":"120744717849070043854348011363085264087","length":2960}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/AndroidUtilities.java","function":"openForView"},"id":"CVE-2024-7014-5308dc42","signature_version":"v1","digest":{"function_hash":"316528540521392622942905171610943913325","length":1610}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsController.java"},"id":"CVE-2024-7014-535142c6","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["318864882210496491267852647152285583870","224159025997398251033384798243755558360","294545718163017074983181321867385125604"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Charts/BaseChartView.java","function":"setData"},"id":"CVE-2024-7014-59e266e2","signature_version":"v1","digest":{"function_hash":"223172252583088336234842784341767558329","length":1713}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java","function":"onItemClick"},"id":"CVE-2024-7014-5d2cb193","signature_version":"v1","digest":{"function_hash":"240693926192498210496409574749283949932","length":28983}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java","function":"onError"},"id":"CVE-2024-7014-61af2740","signature_version":"v1","digest":{"function_hash":"123849971981079284928447714184127383400","length":837}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/browser/Browser.java"},"id":"CVE-2024-7014-61b05936","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["326588289267967739080404908065316273596","155170912543520042526282866196080432776","266449377966719208790620313879210090668","283045194353365618453516676485692882898","90883566681021041319571632725938602506","74217652047472890976132617223729628744","113284078278348347623751031255398668822","242412137418962366031442539509740350339","59741400207043036876836014011793418608","318803426121859250768478942341999895965","200631531803713590660099518387756709602","245931581279394567446017754412461117406","141138597405663512313603168258354157141","265148561638800455001202118102620129606","263913780042847927735040517664122767330","117172252328007338942757556754484622518","75335661128045728203716492676828872965","44797875185299352775887746622371341968","208922276160953044976117983398602931377","210667328581533390415387086556178223459","60189222946536697032509537365789828587","166340606918538280262025146870091917212","43469684482331750125793979929447050507","155334510524373100954345002947132179062","127976396639809455156289346596595254071","199895200899248828762893496294463040032"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessageObject.java","function":"isVideoDocument"},"id":"CVE-2024-7014-66df19da","signature_version":"v1","digest":{"function_hash":"279975290287436022884832291534092245431","length":644}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"checkStats"},"id":"CVE-2024-7014-6b1b72f5","signature_version":"v1","digest":{"function_hash":"100949897755460565781243798976056985746","length":1030}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotWebViewSheet.java","function":"restoreState"},"id":"CVE-2024-7014-6ed4c32c","signature_version":"v1","digest":{"function_hash":"324491687923245513838064695390800294991","length":2044}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/CachedMediaLayout.java","function":"openItem"},"id":"CVE-2024-7014-724927ee","signature_version":"v1","digest":{"function_hash":"152962491278890570692508424224175153031","length":1294}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Charts/PieChartView.java"},"id":"CVE-2024-7014-8acd8965","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["283268556223443069182452230094961110118","60391383591761622891687723114489984423","308027969882407030684089469148199027520","320884719393967980739712888015551570413","110241185464416812897108787817410386046","46360483049754417011236442185240885703","83243370248216027089548010839715160936","319233716546812217842109967471298239371","57148770715332200512464322837942024391","299753525903472136895368259679167166266"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java","function":"preparePlayer"},"id":"CVE-2024-7014-8dddedc1","signature_version":"v1","digest":{"function_hash":"30854992490941794401819556382219025957","length":11171}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"onAnimationEnd"},"id":"CVE-2024-7014-8ec7f6bb","signature_version":"v1","digest":{"function_hash":"275178784111114847421566043113725124525","length":1740}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotWebViewAttachedSheet.java","function":"restoreState"},"id":"CVE-2024-7014-948897d2","signature_version":"v1","digest":{"function_hash":"75112591880883211545575784736064810476","length":2113}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotWebViewSheet.java","function":"saveState"},"id":"CVE-2024-7014-9e7c8c3a","signature_version":"v1","digest":{"function_hash":"89336671611021449785837676109964513935","length":1243}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"createView"},"id":"CVE-2024-7014-9fde4fbb","signature_version":"v1","digest":{"function_hash":"105623132621452120795188641203869101950","length":8550}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/StatisticActivity.java"},"id":"CVE-2024-7014-a31ea702","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["160432549368599704332426673316345998526","115976340149589989182125588882662704918","126303160190518510485239917286652125063","274116359876386882709482057288223310212","217876163013706440461966818356160187337","79739707881239396692948609767007320680","97536897838954007519494170512749296005","111229517136003922559950472977704578884","79917648556775482631808680037555692982","59205808422574422468043168652455404988","98313336669863083155570651416242141526","326541678687902461954716822868252828639"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"verifyDrawable"},"id":"CVE-2024-7014-a6a6a79f","signature_version":"v1","digest":{"function_hash":"126424778011797644847670372409522447595","length":117}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java","function":"setParentActivity"},"id":"CVE-2024-7014-a7ceb7c2","signature_version":"v1","digest":{"function_hash":"317738599612795186533309606824809065389","length":107378}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessagesController.java","function":"onError"},"id":"CVE-2024-7014-ac5a6b87","signature_version":"v1","digest":{"function_hash":"276271137084402730000944580800057345088","length":105}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChatActivity.java","function":"didReceivedNotification"},"id":"CVE-2024-7014-ae2ba570","signature_version":"v1","digest":{"function_hash":"138424563589495371147603202148622409414","length":115990}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/StatisticActivity.java","function":"BaseChartCell"},"id":"CVE-2024-7014-af5e80a7","signature_version":"v1","digest":{"function_hash":"209550459182516632201918981506445038389","length":4866}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelAdminLogActivity.java","function":"onCreateViewHolder"},"id":"CVE-2024-7014-afb98569","signature_version":"v1","digest":{"function_hash":"91781933832893968796077712038019823573","length":19470}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/browser/Browser.java","function":"openUrl"},"id":"CVE-2024-7014-b0839dea","signature_version":"v1","digest":{"function_hash":"223372839975183153583322291916715596302","length":6844}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Components/ThanosEffect.java","function":"kill"},"id":"CVE-2024-7014-b6e4a89a","signature_version":"v1","digest":{"function_hash":"185225017564289956054451902112024311661","length":182}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Charts/BaseChartView.java"},"id":"CVE-2024-7014-b932a164","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["117629595700046997256339181146695365561","287306425726988241846146810928439993660","75694083758492884214927677908130589209","327865959624796918310515336279880350689","231360164260811302776352097351893989195","117746410133705184453917281938890829106","36696640560639170668427824310335720512","26102917359684338848550668019349658275","287546124332988723598151147822939199430"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/AndroidUtilities.java","function":"openForView"},"id":"CVE-2024-7014-b9f34fdf","signature_version":"v1","digest":{"function_hash":"337243339692921994012422083132643612543","length":272}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelMonetizationLayout.java","function":"setStarsBalance"},"id":"CVE-2024-7014-bfa539f2","signature_version":"v1","digest":{"function_hash":"47275891821353899017982111004768257198","length":1116}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/AndroidUtilities.java","function":"openForView"},"id":"CVE-2024-7014-c0d9a877","signature_version":"v1","digest":{"function_hash":"69081342635426613961074950933807225258","length":573}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Charts/ChartPickerDelegate.java"},"id":"CVE-2024-7014-c18a097b","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["166549089340934125725939178509508289653","308749391790132097446514065702817670700","287194898626529740613597977780504563055"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelAdminLogActivity.java","function":"didPressImage"},"id":"CVE-2024-7014-c1a9c869","signature_version":"v1","digest":{"function_hash":"109260542275322617894260486696106298521","length":2787}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelMonetizationLayout.java"},"id":"CVE-2024-7014-c55adfca","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["211453715914648313990179715997814541619","229828112692995015594989279145918752011","114346345992460698854457058914149744551","126633013246723441718398928104512497255","311822014741550105122547713097033276824","170214346984953619145024845063137129061","213184196357497142794390726194920366700","135857638228159630454037602920726251247","228385257458627565602155917380874764879","187420864558613524024496535801566030620","76706466753094708843939570070830564686","39730696488517856723884676912002810538","70011147951442752739752754382609505246","261845785498653308278855476446235775681"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Charts/PieChartView.java","function":"setData"},"id":"CVE-2024-7014-c7ffaf0f","signature_version":"v1","digest":{"function_hash":"211319130133186254036227948257802960982","length":256}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/LocaleController.java","function":"formatPluralStringComma"},"id":"CVE-2024-7014-cab0bc04","signature_version":"v1","digest":{"function_hash":"124060373230609598709437162837734862946","length":1760}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChatActivity.java","function":"didLongPressLink"},"id":"CVE-2024-7014-cd69875e","signature_version":"v1","digest":{"function_hash":"315853395694096170021718965823611196446","length":3440}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"getIntrinsicHeight"},"id":"CVE-2024-7014-ce2fd0b5","signature_version":"v1","digest":{"function_hash":"147520985196129980984417882603641362282","length":47}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessageObject.java"},"id":"CVE-2024-7014-d6f9e31d","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["236701075424322928619003996118126210618","14616832501369108017693027087831286189","287119169449866450069121616574954572100","167062073290275547331173028605059026167","308098018789632581857086648443261224316","214317473019191898819850151497758465441","50420593277276767400020606758761863201","52120901854770663078221563642021532333"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"setBalance"},"id":"CVE-2024-7014-d8226905","signature_version":"v1","digest":{"function_hash":"53344144388178534516315505285927530640","length":1022}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/browser/Browser.java","function":"isBrowserPackageInstalled"},"id":"CVE-2024-7014-db9a4a2b","signature_version":"v1","digest":{"function_hash":"74089074195281640654124535265371218212","length":260}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/BotStarsActivity.java","function":"getIntrinsicWidth"},"id":"CVE-2024-7014-e38114d9","signature_version":"v1","digest":{"function_hash":"147520985196129980984417882603641362282","length":47}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/PhotoViewer.java","function":"onPhotoShow"},"id":"CVE-2024-7014-e469fc23","signature_version":"v1","digest":{"function_hash":"94988399017340761750523094904472538399","length":19657}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stories/StoryViewer.java","function":"onAnimationEnd"},"id":"CVE-2024-7014-e5c5b77b","signature_version":"v1","digest":{"function_hash":"163435933568417512665206062488827806538","length":1380}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/StatisticActivity.java","function":"onMeasure"},"id":"CVE-2024-7014-e9ceb0b9","signature_version":"v1","digest":{"function_hash":"300342082571076879595512938626304804226","length":556}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/bots/BotWebViewAttachedSheet.java"},"id":"CVE-2024-7014-ec5b9b77","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["269031982974327853642964434762537814506","142598131956042930324456855380480232519","115849094602818315348214612101291130175","81130725150817046311120499520422940754","80887600251946536800966765590079987948","220120348952075466045864185076142295715","38247003975061620764736634142536783480","260352638264223882317685933886789966919","315795620340499086048338255097900141931","144715689880639753529077942088558470057"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/messenger/MessagesController.java"},"id":"CVE-2024-7014-f4285ffc","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["86500386829909081545639561424195253292","251794063923656718000184085391638165121","254969515103224829269942130793139073270","126909350013526770859901788495489975568","70627272866158968922970839148654660772","41736481762092225181697848759160392104","318393061698047964355294386588302344237","277111140848676942374059074297962334516","308842687869034489243633098254765600560"]}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Components/ThanosEffect.java","function":"killInternal"},"id":"CVE-2024-7014-f70a4b32","signature_version":"v1","digest":{"function_hash":"146453798477539074530498640556429309359","length":485}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChatActivity.java","function":"onFragmentCreate"},"id":"CVE-2024-7014-f88aa05d","signature_version":"v1","digest":{"function_hash":"235826121848742283287837506347206897608","length":20775}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Function","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/ChannelMonetizationLayout.java","function":"ChannelMonetizationLayout"},"id":"CVE-2024-7014-fc0d9ac6","signature_version":"v1","digest":{"function_hash":"7816660037992986476244284745087134002","length":17324}},{"source":"https://github.com/drklo/telegram/commit/5fa5549a4a7f48476be29cc0facf68990ea10f62","deprecated":false,"signature_type":"Line","target":{"file":"TMessagesProj/src/main/java/org/telegram/ui/Stars/StarsController.java"},"id":"CVE-2024-7014-ffee3839","signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["60232652853392471724118853887571188557","1586046744017478079920111341014701417","256588789167834237947369798257847187299","223464008362971119870456246320353082565"]}}],"vanir_signatures_modified":"2026-04-12T17:29:16Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"}]}