CVE-2018-17231: Telegram Desktop

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Telegram Desktop (aka tdesktop) 1.3.14 might allow attackers to cause a denial of service (assertion failure and application exit) via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by multiple third parties because the described attack scenario does not cross a privilege boundary

Affected products

• Telegram Telegram Desktop: version 1.3.14 only

Published 2018-09-19. Last modified 2026-06-17.