CVE-2021-47793: Telegram Desktop

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.

Affected products

• Telegram Telegram Desktop: version 2.9.2 only

Published 2026-01-16. Last modified 2026-06-17.