CVE-2024-47129

The goTenna Pro App does not inject extra characters into broadcastedframes to obfuscate the length of messages. This makes it possible totell the length of the payload regardless of the encryption used.

CVE-2024-47128

The goTenna Pro App encryption key name is always sent unencrypted whenthe key is shared over RF through a broadcast message. It is advised toshare the encryption key via local QR for higher security operations.