NebuSec says its GPT-5.4-based tool discovered a vulnerability in Telegram's Android app that allowed an attacker to execute code on a victim's phone simply by the victim answering a voice call.
Security disclosure · NebuSec
A call-answer flaw in Telegram's Android app, reportedly found by GPT-5.4
NebuSec says an attacker could execute code on a victim's phone just by the victim answering a voice call. The flaw reportedly affected every Android version from March 2022 through 12.10.4. The claim is unverified and no exploitation has been confirmed.
1
User action required: answering a voice call
Mar 2022
Start of the reported Android exposure window
12.10.4
Last affected Android version, released late September
Exposure timeline
Reported sequence of events, not drawn to scale
March 2022
Android versions begin to be affected
→
May
iOS app receives a fix for the same issue
→
Late September
Version 12.10.4 released; Android users should be on a later build
How the disclosure is being read
Two perspectives raised by the story
Upside for defenders
AI tools can analyze complex software and surface unknown weaknesses.
Such tools may help defenders find bugs faster.
Caution for the ecosystem
The same tools may lower the barrier for attackers.
Remote code execution with minimal user action is generally rated high severity.
What is still unknown
The specifics rest on NebuSec's account alone.
Number of users affected: not available
Evidence of exploitation in the wild: not available
Independent verification or reproduction data: not available
Technical write-up from Telegram: not available
Action for Android users
Check for updates and install a Telegram Android release later than 12.10.4. Watch for further technical details from Telegram or independent researchers, and for whether more vendors adopt AI-assisted vulnerability discovery.
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...