CVE-2018-15542

CVE-2018-15542 is a medium-severity authentication bypass vulnerability affecting Telegram for Android version 4.8.11. An attacker could exploit this by manipulating runtime values to force the Passcode feature to accept an arbitrary passcode, effectively bypassing authentication. While the vendor considers this outside their threat model (excluding rooted devices), the potential impact is high for confidentiality, integrity, and availability. There is no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.