CVE-2020-12717

—

CVSS 3.1

6.5 medium

EPSS

1%p71

Published

May 14, 2020 (May 14, 2020)

Modified

Jun 17, 2026

Description

The COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufacturer data that is too short. This occurs because of an erroneous OpenTrace manuData.subdata call. The ABTraceTogether (Alberta), ProteGO (Poland), and TraceTogether (Singapore) apps were also affected.

Vendors: alberta gov health tracetogether
Products: abtracetogether, protego safe, covidsafe, tracetogether
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.