A bug in Telegram for Android let an attacker run code on a phone once its owner answered a voice call, according to the security startup NebuSec, which disclosed the flaw on 29 October 2026. Telegram ...

The flaw reportedly went unnoticed for four years in code used to manage voice and video calls. 04 Users should update ...

A Telegram Android security flaw could expose phones to remote attacks through calls, but the vulnerability has been fixed.

NebuSec demonstrated code execution through an answered Telegram for Android voice call; the flaw was fixed in version ...

Answering a Telegram call was enough to hand an attacker control of your Android phone, according to security startup NebuSec ...