Low severity2.4NVD Advisory· Published Oct 14, 2020· Updated Jun 17, 2026
CVE-2020-25824
CVE-2020-25824
Description
Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizard but is then distracted. An attacker then approaches the unattended desktop and pushes the Export key. This attacker may consequently gain access to all chat conversation and media files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:telegram:telegram_desktop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:telegram:telegram_desktop:*:*:*:*:*:*:*:*range: <=2.4.3
- (no CPE)range: <=2.4.3
- Telegram Desktop/Telegram Desktopdescription
Patches
Vulnerability mechanics
References
4- github.com/soheilsamanabadi/vulnerability/blob/main/Telegram-Desktop-CVE-2020-25824nvdThird Party Advisory
- github.com/telegramdesktop/tdesktop/releases/tag/v2.4.3nvdRelease NotesThird Party Advisory
- security.gentoo.org/glsa/202101-34nvdThird Party Advisory
- www.telegram.orgnvdProduct
News mentions
0No linked articles in our index yet.