CVE-2021-47793

None

CVSS

—

EPSS

0.5%

Published

Jan 16, 2026

CISA due date

—

The record

Telegram Desktop 2.9.2 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized message payload. Attackers can generate a 9 million byte buffer and paste it into the messaging interface to trigger an application crash.

Affected packages

Ecosystem	Package	Introduced	Fixed