{"id":"CVE-2024-54916","aliases":["EUVD-2024-52693","GHSA-99fv-v434-wh6f"],"status":"published","title":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate...","description":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00429,"percentile":0.37627,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287","CWE-863"],"published":"2025-02-11T00:00:00Z","modified":"2026-06-17T08:10:46Z","exploits":[{"source":"pocgithub","id":"SAHALLL/CVE-2024-54916","title":"SAHALLL/CVE-2024-54916","date":"2025-02-08","url":"https://github.com/SAHALLL/CVE-2024-54916"}],"references":[{"url":"https://drive.google.com/file/d/1knf8-_fFUSLd3ZmbEpy0_OVzSN1UR1JR/view?usp=sharing"},{"url":"https://github.com/SAHALLL/CVE-2024-54916"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54916"},{"url":"https://github.com/advisories/GHSA-99fv-v434-wh6f"}],"sources":{"cve":[{"id":"CVE-2024-54916","description":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.","status":"published","published":"2025-02-11T00:00:00Z","modified":"2025-03-18T14:38:40.077Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:33:59.512321Z"}],"euvd":[{"id":"EUVD-2024-52693","description":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.","status":"published","published":"2025-02-11T00:00:00Z","modified":"2025-03-18T14:38:40Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:53:00.87598Z"}],"ghsa":[{"id":"GHSA-99fv-v434-wh6f","title":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate...","description":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.","status":"published","published":"2025-02-12T00:32:17Z","modified":"2025-03-18T15:31:53Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-287","CWE-863"],"updated_at":"2026-11-02T15:00:20.689988Z"}],"nvd":[{"id":"CVE-2024-54916","description":"An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.","status":"published","published":"2025-02-11T23:15:09.227Z","modified":"2026-06-17T08:10:46.78Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}