Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice Calls
NebuSec demonstrated code execution through an answered Telegram for Android voice call; the flaw was fixed in version 12.10.4.
More info