Connect-iq vulnerabilities

9 known vulnerabilities in Connect-iq from Garmin. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Connect-iq: Out-of-bounds Write

  CVE-2023-23306May 23, 2023GarminEPSS 1.23%

  The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which can result in an out-of-bounds write operation. A malicious application could create a specially crafted `Toybox.Ant.BurstPay

• 9.8 Critical severity

  Connect-iq: Buffer Copy without Checking Size of Input

  CVE-2023-23305May 23, 2023GarminEPSS 1.29%

  The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading binary resources. A malicious application embedding specially crafted resources could hijack the execution of the device's firmware.

• 9.1 Critical severity

  Connect-iq: Incorrect Authorization

  CVE-2023-23304May 23, 2023Garmin

  The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a specially crafted head section to use the `Toybox.SensorHistory` module without permission. A malicious application could call any functions from the `Toybox.SensorHis

• 9.8 Critical severity

  Connect-iq: Buffer Copy without Checking Size of Input

  CVE-2023-23303May 23, 2023Garmin

  The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with spe

• 9.8 Critical severity

  Connect-iq: Buffer Copy without Checking Size of Input

  CVE-2023-23302May 23, 2023GarminEPSS 1.27%

  The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with speciall

• 9.8 Critical severity

  Connect-iq: Out-of-bounds Read

  CVE-2023-23301May 23, 2023GarminEPSS 1.06%

  The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and w

• 9.8 Critical severity

  Connect-iq: Buffer Copy without Checking Size of Input

  CVE-2023-23300May 23, 2023GarminEPSS 1.29%

  The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted par

• 7.5 High severity

  Connect-iq: Incorrect Authorization

  CVE-2023-23299May 23, 2023Garmin

  The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their

• 9.8 Critical severity

  Connect-iq: Integer Overflow or Wraparound

  CVE-2023-23298May 23, 2023GarminEPSS 1.47%

  The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API m