{"vulnerability": "cve-2020-1895", "sightings": [{"uuid": "0cf4ff85-0182-47c2-a330-8796a419aa60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "published-proof-of-concept", "source": "https://t.me/cKure/2332", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2020-1895: #Instagram_RCE: Code Execution Vulnerability in Instagram App for Android and iOS.\n\nhttps://research.checkpoint.com/2020/instagram_rce-code-execution-vulnerability-in-instagram-app-for-android-and-ios", "creation_timestamp": "2020-09-24T11:21:35.000000Z"}, {"uuid": "ec2e5d02-a5dc-4157-b07c-4f2dc9d45bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/Yemen_Shield/503", "content": "\u0647\u0644 \u062a\u0633\u0627\u0621\u0644\u062a \u064a\u0648\u0645\u064b\u0627 \u0643\u064a\u0641 \u064a\u0645\u0643\u0646 \u0644\u0644\u0642\u0631\u0627\u0635\u0646\u0629 \u0627\u062e\u062a\u0631\u0627\u0642 \u0647\u0627\u062a\u0641\u0643 \u0627\u0644\u0630\u0643\u064a \u0639\u0646 \u0628\u064f\u0639\u062f\u061f\n\n\u0641\u064a \u062a\u0642\u0631\u064a\u0631 \u062a\u0645\u062a \u0645\u0634\u0627\u0631\u0643\u062a\u0647 \u0645\u0639 The Hacker News \u0627\u0644\u064a\u0648\u0645 \u060c \u0643\u0634\u0641 \u0628\u0627\u062d\u062b\u0648 Check Point \u0639\u0646 \u062a\u0641\u0627\u0635\u064a\u0644 \u062d\u0648\u0644 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u062a\u0637\u0628\u064a\u0642 Android \u0627\u0644\u062e\u0627\u0635 \u0628\u0640 Instagram \u0648\u0627\u0644\u062a\u064a \u0643\u0627\u0646 \u0645\u0646 \u0627\u0644\u0645\u0645\u0643\u0646 \u0623\u0646 \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u062c\u0647\u0627\u0632 \u0645\u0633\u062a\u0647\u062f\u0641 \u0641\u0642\u0637 \u0639\u0646 \u0637\u0631\u064a\u0642 \u0625\u0631\u0633\u0627\u0644 \u0635\u0648\u0631\u0629 \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627 \u0644\u0644\u0636\u062d\u0627\u064a\u0627.\n\n\u0627\u0644\u0623\u0645\u0631 \u0627\u0644\u0623\u0643\u062b\u0631 \u0625\u062b\u0627\u0631\u0629 \u0644\u0644\u0642\u0644\u0642 \u0647\u0648 \u0623\u0646 \u0627\u0644\u062e\u0644\u0644 \u0644\u0627 \u064a\u0633\u0645\u062d \u0641\u0642\u0637 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u0625\u062c\u0631\u0627\u0621\u0627\u062a \u0646\u064a\u0627\u0628\u0629 \u0639\u0646 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u062f\u0627\u062e\u0644 \u062a\u0637\u0628\u064a\u0642 Instagram - \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0627\u0644\u062a\u062c\u0633\u0633 \u0639\u0644\u0649 \u0627\u0644\u0631\u0633\u0627\u0626\u0644 \u0627\u0644\u062e\u0627\u0635\u0629 \u0644\u0644\u0636\u062d\u064a\u0629 \u0648\u062d\u062a\u0649 \u062d\u0630\u0641 \u0627\u0644\u0635\u0648\u0631 \u0623\u0648 \u0646\u0634\u0631\u0647\u0627 \u0645\u0646 \u062d\u0633\u0627\u0628\u0627\u062a\u0647\u0645 - \u0648\u0644\u0643\u0646 \u0623\u064a\u0636\u064b\u0627 \u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n\u0648\u0641\u0642\u064b\u0627 \u0644\u0627\u0633\u062a\u0634\u0627\u0631\u0629 \u0646\u0634\u0631\u062a\u0647\u0627 Facebook \u060c \u0641\u0625\u0646 \u0645\u0634\u0643\u0644\u0629 \u0623\u0645\u0627\u0646 \u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0645\u0624\u0642\u062a\u0629 (\u0627\u0644\u062a\u064a \u062a\u0645 \u062a\u062a\u0628\u0639\u0647\u0627 \u0643\u0640 CVE-2020-1895 \u060c \u062f\u0631\u062c\u0629 CVSS: 7.8) \u062a\u0624\u062b\u0631 \u0639\u0644\u0649 \u062c\u0645\u064a\u0639 \u0625\u0635\u062f\u0627\u0631\u0627\u062a \u062a\u0637\u0628\u064a\u0642 Instagram \u0642\u0628\u0644 128.0.0.26.128 \u060c \u0648\u0627\u0644\u0630\u064a \u062a\u0645 \u0625\u0635\u062f\u0627\u0631\u0647 \u0641\u064a 10 \u0641\u0628\u0631\u0627\u064a\u0631 \u0641\u064a \u0648\u0642\u062a \u0633\u0627\u0628\u0642 \u0647\u0630\u0627 \u0639\u0627\u0645.\n\n\u0648\u0642\u0627\u0644\u062a Check Point Research \u0641\u064a \u062a\u062d\u0644\u064a\u0644 \u0646\u064f\u0634\u0631 \u0627\u0644\u064a\u0648\u0645: \"\u0647\u0630\u0627 [\u0627\u0644\u062e\u0644\u0644] \u064a\u062d\u0648\u0644 \u0627\u0644\u062c\u0647\u0627\u0632 \u0625\u0644\u0649 \u0623\u062f\u0627\u0629 \u0644\u0644\u062a\u062c\u0633\u0633 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641\u064a\u0646 \u062f\u0648\u0646 \u0639\u0644\u0645\u0647\u0645 \u060c \u0641\u0636\u0644\u0627\u064b \u0639\u0646 \u062a\u0645\u0643\u064a\u0646 \u0627\u0644\u062a\u0644\u0627\u0639\u0628 \u0627\u0644\u0636\u0627\u0631 \u0628\u0645\u0644\u0641\u0647\u0645 \u0627\u0644\u0634\u062e\u0635\u064a \u0639\u0644\u0649 Instagram\".\n\n\"\u0641\u064a \u0643\u0644\u062a\u0627 \u0627\u0644\u062d\u0627\u0644\u062a\u064a\u0646 \u060c \u0642\u062f \u064a\u0624\u062f\u064a \u0627\u0644\u0647\u062c\u0648\u0645 \u0625\u0644\u0649 \u063a\u0632\u0648 \u0648\u0627\u0633\u0639 \u0627\u0644\u0646\u0637\u0627\u0642 \u0644\u062e\u0635\u0648\u0635\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0648\u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0624\u062b\u0631 \u0639\u0644\u0649 \u0633\u0645\u0639\u062a\u0647\u0645 - \u0623\u0648 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u0645\u062e\u0627\u0637\u0631 \u0623\u0645\u0646\u064a\u0629 \u0623\u0643\u062b\u0631 \u062e\u0637\u0648\u0631\u0629.\"\n\n\u0628\u0639\u062f \u0625\u0628\u0644\u0627\u063a Facebook \u0628\u0627\u0644\u0646\u062a\u0627\u0626\u062c \u060c \u0639\u0627\u0644\u062c\u062a \u0634\u0631\u0643\u0629 \u0627\u0644\u062a\u0648\u0627\u0635\u0644 \u0627\u0644\u0627\u062c\u062a\u0645\u0627\u0639\u064a \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0628\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0635\u062d\u064a\u062d \u0627\u0644\u0630\u064a \u062a\u0645 \u0625\u0635\u062f\u0627\u0631\u0647 \u0642\u0628\u0644 \u0633\u062a\u0629 \u0623\u0634\u0647\u0631. \u062a\u0645 \u062a\u0623\u062c\u064a\u0644 \u0627\u0644\u0643\u0634\u0641 \u0627\u0644\u0639\u0627\u0645 \u0637\u0648\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0648\u0642\u062a \u0644\u0644\u0633\u0645\u0627\u062d \u0644\u063a\u0627\u0644\u0628\u064a\u0629 \u0645\u0633\u062a\u062e\u062f\u0645\u064a Instagram \u0628\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0637\u0628\u064a\u0642 \u060c \u0648\u0628\u0627\u0644\u062a\u0627\u0644\u064a \u0627\u0644\u062a\u062e\u0641\u064a\u0641 \u0645\u0646 \u0627\u0644\u0645\u062e\u0627\u0637\u0631 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u0633\u0628\u0628\u0647\u0627 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n\n\u0639\u0644\u0649 \u0627\u0644\u0631\u063a\u0645 \u0645\u0646 \u0623\u0646 Facebook \u0623\u0643\u062f \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0639\u0644\u0627\u0645\u0627\u062a \u0639\u0644\u0649 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u062e\u0637\u0623 \u0639\u0644\u0649 \u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0639\u0627\u0644\u0645 \u060c \u0625\u0644\u0627 \u0623\u0646 \u0627\u0644\u062a\u0637\u0648\u064a\u0631 \u0647\u0648 \u062a\u0630\u0643\u064a\u0631 \u0622\u062e\u0631 \u0644\u0633\u0628\u0628 \u0636\u0631\u0648\u0631\u0629 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0628\u0627\u0633\u062a\u0645\u0631\u0627\u0631 \u0648\u0645\u0631\u0627\u0639\u0627\u0629 \u0627\u0644\u0623\u0630\u0648\u0646\u0627\u062a \u0627\u0644\u0645\u0645\u0646\u0648\u062d\u0629 \u0644\u0647\u0645.\n\u0648\u062c\u0648\u062f \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u062d\u0627\u0644\u0629 \u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0643\u0648\u0645\u0629\n\n\u0648\u0641\u0642\u064b\u0627 \u0644\u0640 Check Point \u060c \u062a\u0633\u0645\u062d \u062b\u063a\u0631\u0629 \u062a\u0644\u0641 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0628\u062a\u0646\u0641\u064a\u0630 \u0627\u0644\u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0646 \u0628\u064f\u0639\u062f \u060c \u0648\u0627\u0644\u062a\u064a \u064a\u0645\u0643\u0646 \u0627\u0644\u0627\u0633\u062a\u0641\u0627\u062f\u0629 \u0645\u0646\u0647\u0627 \u060c \u0646\u0638\u0631\u064b\u0627 \u0644\u0623\u0630\u0648\u0646\u0627\u062a Instagram \u0627\u0644\u0648\u0627\u0633\u0639\u0629 \u0644\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0643\u0627\u0645\u064a\u0631\u0627 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u062c\u0647\u0627\u062a \u0627\u0644\u0627\u062a\u0635\u0627\u0644 \u0648\u0646\u0638\u0627\u0645 \u062a\u062d\u062f\u064a\u062f \u0627\u0644\u0645\u0648\u0627\u0642\u0639 \u0627\u0644\u0639\u0627\u0644\u0645\u064a (GPS) \u0648\u0645\u0643\u062a\u0628\u0629 \u0627\u0644\u0635\u0648\u0631 \u0648\u0627\u0644\u0645\u064a\u0643\u0631\u0648\u0641\u0648\u0646 \u060c \u0644\u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u0625\u062c\u0631\u0627\u0621 \u0636\u0627\u0631 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0645\u0635\u0627\u0628.\n\n\u0623\u0645\u0627 \u0628\u0627\u0644\u0646\u0633\u0628\u0629 \u0644\u0644\u0639\u064a\u0628 \u0646\u0641\u0633\u0647 \u060c \u0641\u0647\u0648 \u064a\u0646\u0628\u0639 \u0645\u0646 \u0627\u0644\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u062a\u064a \u062f\u0645\u062c \u0628\u0647\u0627 Instagram MozJPEG - \u0648\u0647\u064a \u0645\u0643\u062a\u0628\u0629 \u062a\u0634\u0641\u064a\u0631 JPEG \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u062a\u0647\u062f\u0641 \u0625\u0644\u0649 \u062a\u0642\u0644\u064a\u0644 \u0627\u0644\u0646\u0637\u0627\u0642 \u0627\u0644\u062a\u0631\u062f\u062f\u064a \u0648\u062a\u0648\u0641\u064a\u0631 \u0636\u063a\u0637 \u0623\u0641\u0636\u0644 \u0644\u0644\u0635\u0648\u0631 \u0627\u0644\u062a\u064a \u064a\u062a\u0645 \u062a\u062d\u0645\u064a\u0644\u0647\u0627 \u0625\u0644\u0649 \u0627\u0644\u062e\u062f\u0645\u0629 - \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u062c\u0627\u0648\u0632 \u0639\u062f\u062f \u0635\u062d\u064a\u062d \u0639\u0646\u062f \u0648\u062c\u0648\u062f \u0648\u0638\u064a\u0641\u0629 \u0636\u0639\u064a\u0641\u0629 \u0641\u064a \u0627\u0644\u0633\u0624\u0627\u0644 ( \u064a\u062d\u0627\u0648\u0644 \"read_jpg_copy_loop\") \u062a\u062d\u0644\u064a\u0644 \u0635\u0648\u0631\u0629 \u0636\u0627\u0631\u0629 \u0630\u0627\u062a \u0623\u0628\u0639\u0627\u062f \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627.\n\n\u0639\u0646\u062f \u0627\u0644\u0642\u064a\u0627\u0645 \u0628\u0630\u0644\u0643 \u060c \u064a\u0645\u0643\u0646 \u0644\u0644\u0639\u062f\u0648 \u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u062d\u062c\u0645 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0645\u062e\u0635\u0635\u0629 \u0644\u0644\u0635\u0648\u0631\u0629 \u060c \u0648\u0637\u0648\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062a\u064a \u0633\u064a\u062a\u0645 \u0627\u0633\u062a\u0628\u062f\u0627\u0644\u0647\u0627 \u060c \u0648\u0623\u062e\u064a\u0631\u064b\u0627 \u060c \u0645\u062d\u062a\u0648\u064a\u0627\u062a \u0645\u0646\u0637\u0642\u0629 \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0641\u0627\u0626\u0636\u0629 \u060c \u0645\u0645\u0627 \u064a\u0645\u0646\u062d \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0631\u0647 \u0627\u0644\u0642\u062f\u0631\u0629 \u0639\u0644\u0649 \u0625\u062a\u0644\u0627\u0641 \u0628\u0639\u0636 \u0645\u0648\u0627\u0642\u0639 \u0641\u064a \u0643\u0648\u0645\u0629 \u0648\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0627\u0644\u062a\u062d\u0648\u064a\u0644.\n\n\u0646\u062a\u064a\u062c\u0629 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u064a \u0623\u0646 \u0643\u0644 \u0645\u0627 \u064a\u062d\u062a\u0627\u062c\u0647 \u0627\u0644\u0641\u0627\u0639\u0644 \u0627\u0644\u0633\u064a\u0626 \u0647\u0648 \u0625\u0631\u0633\u0627\u0644 \u0635\u0648\u0631\u0629 JPEG \u062a\u0627\u0644\u0641\u0629 \u0625\u0644\u0649 \u0627\u0644\u0636\u062d\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u0628\u0631\u064a\u062f \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a \u0623\u0648 WhatsApp. \u0628\u0645\u062c\u0631\u062f \u0623\u0646 \u064a\u062d\u0641\u0638 \u0627\u0644\u0645\u0633\u062a\u0644\u0645 \u0627\u0644\u0635\u0648\u0631\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632 \u0648\u064a\u0637\u0644\u0642 Instagram \u060c \u064a\u062a\u0645 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062a\u0644\u0642\u0627\u0626\u064a\u064b\u0627 \u060c \u0645\u0645\u0627 \u064a\u0645\u0646\u062d \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0633\u064a\u0637\u0631\u0629 \u0627\u0644\u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062a\u0637\u0628\u064a\u0642.\n\n\u0648\u0627\u0644\u0623\u0633\u0648\u0623 \u0645\u0646 \u0630\u0644\u0643 \u060c \u0623\u0646\u0647 \u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0639\u0637\u064a\u0644 \u062a\u0637\u0628\u064a\u0642 Instagram \u0627\u0644\u062e\u0627\u0635 \u0628\u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0648\u062c\u0639\u0644\u0647 \u063a\u064a\u0631 \u0645\u0645\u0643\u0646 \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u064a\u0647 \u0645\u0627 \u0644\u0645 \u062a\u062a\u0645 \u0625\u0632\u0627\u0644\u062a\u0647 \u0648\u0625\u0639\u0627\u062f\u0629 \u062a\u062b\u0628\u064a\u062a\u0647 \u0645\u0631\u0629 \u0623\u062e\u0631\u0649 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n\u0625\u0630\u0627 \u0643\u0627\u0646 \u0647\u0646\u0627\u0643 \u0623\u064a \u0634\u064a\u0621 \u060c \u0641\u0625\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u062a\u0634\u064a\u0631 \u0625\u0644\u0649 \u0623\u0646 \u062f\u0645\u062c \u0645\u0643\u062a\u0628\u0627\u062a \u0627\u0644\u0637\u0631\u0641 \u0627\u0644\u062b\u0627\u0644\u062b \u0641\u064a \u0627\u0644\u062a\u0637\u0628\u064a\u0642\u0627\u062a \u0648\u0627\u0644\u062e\u062f\u0645\u0627\u062a \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0631\u0627\u0628\u0637\u064b\u0627 \u0636\u0639\u064a\u0641\u064b\u0627 \u0644\u0644\u0623\u0645\u0627\u0646 \u0625\u0630\u0627 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0644\u062a\u0643\u0627\u0645\u0644 \u0628\u0634\u0643\u0644 \u0635\u062d\u064a\u062d.                               https://t.me/Yemen_Shield", "creation_timestamp": "2020-09-25T23:12:40.000000Z"}, {"uuid": "62d6d143-98cd-45d9-a1a3-2b85a62bc44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/true_secator/975", "content": "\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Check Point \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-1895 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Instagram \u0434\u043b\u044f Android \u0438 iOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0435\u0433\u043e \u043a\u0430\u043c\u0435\u0440\u044b \u0438 \u043c\u0438\u043a\u0440\u043e\u0444\u043e\u043d\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0431\u044b\u043b\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 Instagram \u0434\u043e 128.0.0.26.128, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e Facebook \u0435\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435. \u0418 \u0432\u043e\u0442 \u0442\u0435\u043f\u0435\u0440\u044c, \u0441\u043f\u0443\u0441\u0442\u044f \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0430, Check Point, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 CVE-2020-1895, \u0440\u0435\u0448\u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0435\u0435 \u0434\u0435\u0442\u0430\u043b\u0438.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 \u0432 Instagram \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Mozjpeg, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 JPEG. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0447\u0442\u043e, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a RCE.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2020-1895 \u0445\u0430\u043a\u0435\u0440\u0443 \u0431\u044b\u043b\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0436\u0435\u0440\u0442\u0432\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043b\u044e\u0431\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c - \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435, WhatsApp, \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b \u0438 \u0442.\u0434. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 Instagram \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nFacebook \u0433\u043e\u0432\u043e\u0440\u0438\u0442, \u0447\u0442\u043e \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u044b \u043d\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f, \u043d\u043e, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u044d\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043d\u0435 \u0431\u044b\u043b\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2020-09-25T11:11:00.000000Z"}, {"uuid": "b26ee590-a511-41ee-9302-da70ee4988bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/thehackernews/855", "content": "\ud83d\udd25\ud83d\udd25\ud83d\udd25 A major vulnerability (CVE-2020-1895) in Instagram Android app could have allowed remote attackers to take control over targeted devices just by sending victims a specially crafted image.\n\nDetails: https://thehackernews.com/2020/09/instagram-android-hack.html", "creation_timestamp": "2020-09-24T12:23:34.000000Z"}, {"uuid": "f608ea6a-704e-4490-94b7-2e9ba25d2e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1805", "content": "#Threat_Research\nCode Execution Vulnerability in Instagram App for Android/iOS (CVE-2020-1895)\nhttps://research.checkpoint.com/2020/instagram_rce-code-execution-vulnerability-in-instagram-app-for-android-and-ios", "creation_timestamp": "2022-05-27T14:14:24.000000Z"}, {"uuid": "ee00bba3-a769-428d-a59d-22b7debdafcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "published-proof-of-concept", "source": "Telegram/yQExRDM1VBaRNwFWvWuy0xF0TfeO9xaaeSO2ujzq9YsCxOxg", "content": "", "creation_timestamp": "2020-09-24T10:23:52.000000Z"}, {"uuid": "c2e4736a-58dd-4224-8fd8-75c321cbb03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/pleyades_it/7608", "content": "\u2757\ufe0fInvestigadores de Check Point revelan detalles de una #vulnerabilidad cr\u00edtica (CVE-2020-1895) en la aplicaci\u00f3n de Instagram para Android que podr\u00eda permitir a un cracker tomar el control de un dispositivo con solo enviar a la v\u00edctima una imagen especialmente dise\u00f1ada.\nEl fallo de seguridad afecta a todas las versiones de la app de Instagram anteriores a la 128.0.0.26.128 (publicada el 10 de febrero de este a\u00f1o), y consiste en una corrupci\u00f3n de la memoria que har\u00eda posible la ejecuci\u00f3n de c\u00f3digo remoto, permitiendo tomar el control de los permisos de Instagram sobre componentes del dispositivo y aprovecharse de ellos.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddec\ud83c\udde7 https://bit.ly/3hY5V4A\n\ud83c\uddea\ud83c\uddf8 https://bit.ly/33Y5Oky\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles sobre la vulnerabilidad CVE-2020-1895:\nhttps://bit.ly/33WA3Zi\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-12T22:00:17.149466Z"}, {"uuid": "66187586-812f-476d-9187-a0ea0f87930c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/pleyades_it/7608", "content": "\u2757\ufe0fInvestigadores de Check Point revelan detalles de una #vulnerabilidad cr\u00edtica (CVE-2020-1895) en la aplicaci\u00f3n de Instagram para Android que podr\u00eda permitir a un cracker tomar el control de un dispositivo con solo enviar a la v\u00edctima una imagen especialmente dise\u00f1ada.\nEl fallo de seguridad afecta a todas las versiones de la app de Instagram anteriores a la 128.0.0.26.128 (publicada el 10 de febrero de este a\u00f1o), y consiste en una corrupci\u00f3n de la memoria que har\u00eda posible la ejecuci\u00f3n de c\u00f3digo remoto, permitiendo tomar el control de los permisos de Instagram sobre componentes del dispositivo y aprovecharse de ellos.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddec\ud83c\udde7 https://bit.ly/3hY5V4A\n\ud83c\uddea\ud83c\uddf8 https://bit.ly/33Y5Oky\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles sobre la vulnerabilidad CVE-2020-1895:\nhttps://bit.ly/33WA3Zi\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-13T00:00:41.009187Z"}, {"uuid": "88e8f1ae-7b2a-4599-89e8-dccf4e4c7ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1895", "type": "seen", "source": "https://t.me/pleyades_it/7608", "content": "\u2757\ufe0fInvestigadores de Check Point revelan detalles de una #vulnerabilidad cr\u00edtica (CVE-2020-1895) en la aplicaci\u00f3n de Instagram para Android que podr\u00eda permitir a un cracker tomar el control de un dispositivo con solo enviar a la v\u00edctima una imagen especialmente dise\u00f1ada.\nEl fallo de seguridad afecta a todas las versiones de la app de Instagram anteriores a la 128.0.0.26.128 (publicada el 10 de febrero de este a\u00f1o), y consiste en una corrupci\u00f3n de la memoria que har\u00eda posible la ejecuci\u00f3n de c\u00f3digo remoto, permitiendo tomar el control de los permisos de Instagram sobre componentes del dispositivo y aprovecharse de ellos.\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83c\uddec\ud83c\udde7 https://bit.ly/3hY5V4A\n\ud83c\uddea\ud83c\uddf8 https://bit.ly/33Y5Oky\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udd16 M\u00e1s detalles sobre la vulnerabilidad CVE-2020-1895:\nhttps://bit.ly/33WA3Zi\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796", "creation_timestamp": "2026-07-14T00:00:51.124235Z"}]}