Researcher claims zero-click Telegram sticker flaw rated 9.8; Telegram disputes it
The bug would run code just from the sticker preview, with no tap needed.
A post from BalaiBB says a security researcher showed a zero-click vulnerability in Telegram's animated stickers, rated 9.8 out of 10.
According to the post, simply receiving the sticker is enough, because Telegram automatically processes it to show a preview, and code runs with no tap or link clicked. Telegram says the bug doesn't exist and that its servers validate every sticker, so this is "technically impossible." The post says the researcher presented proof at a security conference in Tokyo.
Why it mattersZero-click bugs are among the most dangerous kinds, so a public dispute between a researcher and a major messaging app is worth watching.
