CVE-2020-12857

Name of the Vulnerable Software and Affected Versions COVIDSafe versions 1.0.15 through 1.0.16

Description The issue allows a remote attacker to long-term re-identify an Android device running COVIDSafe due to the caching of GATT characteristic values (TempID).

Recommendations For COVIDSafe versions 1.0.15 and 1.0.16, consider disabling the caching of GATT characteristic values as a temporary workaround until a patch is available. Restrict access to the TempID to minimize the risk of exploitation.