Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

CVE-2021-36769: Telegram Messages Can Be Received Out of Order

CVE-2021-36769 · published 5 years ago
Summary

Some versions of Telegram for Android, iOS, and Desktop can receive messages in a different order than they were sent. This could potentially allow an attacker to manipulate message order, but it's unclear if this would cause any real issues. Users should update to the latest version to ensure they have the latest security patches.

What to do
  • Update telegram telegram_desktop to version 2.8.8 or later.
Affected software
VendorProductAffected versions
telegram telegram < 7.8.1
< 7.8.3
cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*
telegram telegram_desktop < 2.8.8
cpe:2.3:a:telegram:telegram_desktop:*:*:*:*:*:*:*:*
Original advisory text
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different...
A reordering issue exists in Telegram before 7.8.1 for Android, Telegram before 7.8.3 for iOS, and Telegram Desktop before 2.8.8. An attacker can cause the server to receive messages in a different order than they were sent a client.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published17 Jul 2021
Updated4 Nov 2026
First seen9 Jul 2026
Sources
CVE-2021-36769 · NVD
Track software like this
Free during beta