CVE-2020-10570: Telegram

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended restrictions on message reading and message replying. This might be interpreted as a bypass of the passcode feature.

Affected products

• Telegram Telegram: up to and including 5.12.0

Published 2020-03-24. Last modified 2026-06-17.