Researchers at a security conference in Tokyo disclosed a zero-click vulnerability in Telegram's emoji sticker feature, demonstrating that an attacker could execute code on iOS devices without any user interaction. The flaw allows malicious data to be processed automatically by the device, requiring no clicks or actions from the target. Telegram disputes the risk assessment of the vulnerability, and available information does not specify the exact scope of impact or the status of remediation efforts. Zero-click exploits represent high-severity flaws commonly triggered through entry points such as voice calls, message previews, web rendering, audio decoding, and wireless debugging.