CVE-2020-14292

CVE-2020-14292：COVIDSafe 应用中的蓝牙传输问题 作者：Alwen Tiu，澳大利亚国立大学 最后更新：2020-09-08 摘要 在适用于 Android 的 COVIDSafe 应用 1.0.21 及更早版本中，GATT 连接中不安全地使用蓝牙传输选项，允许攻击者诱骗该应用通过蓝牙 BR/EDR 传输建立连接，从而在未经授权的情况下泄露受害者手机的公共蓝牙地址，绕过手机上的蓝牙地址随机化保护。此问题通过 CVE-2020-14292. 进行跟踪。 技术描述 该问题的原因在于 startWork 函数， 该函数使用 connectGatt 建立 GATT...

EUVD-2020-6445

Malware in sbrugna...

Code injection

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...

CVE-2020-14292

In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection over Bluetooth BR/EDR transport, which reveals the public Bluetooth address of the victim's phone...