VYPR

Exposure Notifications

by Apple Inc.

CVEs (2)

  • CVE-2020-24722MedOct 7, 2020
    risk 0.39cvss 5.9epss 0.02

    An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-10-05, as used in COVID-19 applications on Android and iOS. The encrypted metadata block with a TX value lacks a checksum, allowing bitflipping to amplify a contamination attack.…

  • CVE-2020-24721MedSep 30, 2020
    risk 0.37cvss 5.7epss 0.00

    An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a position where he or she can be coerced into proving or disproving an exposure…