CVE-2021-30496

The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the Persian language) into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that "this behavior can't be considered a vulnerability."

• CWE-121

• https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31Exploit, Third Party Advisory
• https://t.me/joinchat/bJ9cnUosVh03ZTI0Vendor Advisory
• https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31Exploit, Third Party Advisory
• https://t.me/joinchat/bJ9cnUosVh03ZTI0Vendor Advisory

Published

Apr 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30486SysAid 20.3.64 b14 is affected by Blind and Stacker SQL inje…8.8
• CVE-2021-30487In the topic moving API in Zulip Server 3.x before 3.4, orga…2.7
• CVE-2021-3049An improper authorization vulnerability in the Palo Alto Net…4.3
• CVE-2021-30490upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 throu…7.8
• CVE-2021-30493Multiple system services installed alongside the Razer Synap…5.5
• CVE-2021-30494Multiple system services installed alongside the Razer Synap…5.5
• CVE-2021-30497Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticat…7.5
• CVE-2021-30498A flaw was found in libcaca. A heap buffer overflow in expor…7.8
• CVE-2021-30499A flaw was found in libcaca. A buffer overflow of export.c i…7.8
• CVE-2021-3050An OS command injection vulnerability in the Palo Alto Netwo…8.8
• CVE-2021-30500Null pointer dereference was found in upx PackLinuxElf::canU…7.8
• CVE-2021-30501An assertion abort was found in upx MemBuffer::alloc() in me…5.5