CVE-2020-12856

OpenTrace (used in COVIDSafe up to v1.0.17) and similar apps on iOS/Android expose a vulnerability where Bluetooth usage enables long-term user re-identification by remote attackers, per CVE-2020-12856. Red‑hat and other sources mirror this description. The Android security bulletin lists CVE-202...

CVE-2020-12717

The CVE-2020-12717 entry concerns the COVIDSafe iOS apps (Australia) versions 1.0 and 1.1, with additional impact cited on AB TraceTogether, ProteGO, and TraceTogether. The issue stems from an erroneous subroutine call (OpenTrace manuData.subdata) when processing Bluetooth manufacturer data that ...