NebuSec demonstrated code execution through an answered Telegram for Android voice call; the flaw was fixed in version 12.10.4.
A Telegram Android security flaw could expose phones to remote attacks through calls, but the vulnerability has been fixed. Update the app to stay protected.