Vulnerabilities > Garmin > Connect IQ > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-23 | CVE-2023-23306 | Out-of-bounds Write vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which can result in an out-of-bounds write operation. | 9.8 |
| 2023-05-23 | CVE-2023-23305 | Classic Buffer Overflow vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading binary resources. | 9.8 |
| 2023-05-23 | CVE-2023-23304 | Unspecified vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a specially crafted head section to use the `Toybox.SensorHistory` module without permission. | 9.1 |
| 2023-05-23 | CVE-2023-23303 | Classic Buffer Overflow vulnerability in Garmin Connect-Iq 4.1.7 The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. | 9.8 |
| 2023-05-23 | CVE-2023-23302 | Classic Buffer Overflow vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. | 9.8 |
| 2023-05-23 | CVE-2023-23301 | Out-of-bounds Read vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. | 9.8 |
| 2023-05-23 | CVE-2023-23300 | Classic Buffer Overflow vulnerability in Garmin Connect-Iq 4.1.7 The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. | 9.8 |
| 2023-05-23 | CVE-2023-23298 | Integer Overflow or Wraparound vulnerability in Garmin Connect-Iq 2.3.0/4.1.7 The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. | 9.8 |