Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
| Software | From | Fixed in |
|---|---|---|
| telegram / telegram_desktop | 1.3.14 | 1.3.14.x |
| telegram / telegram_messenger | 3.3.0.0 | 3.3.0.0.x |