Lucene search
PRIOn knowledge basePRION:CVE-2023-23300HistoryMay 23, 2023 - 8:15 p.m.
Buffer overflow
2023-05-2320:15:00
PRIOn knowledge base
www.prio-n.com
3
buffer overflow
ciq api
validation
parameters
data copy
malicious application
firmware hijack
The Toybox.Cryptography.Cipher.initialize API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted parameters and hijack the execution of the device’s firmware.
| CPE | Name | Operator | Version |
|---|---|---|---|
| connect-iq | ge | 3.0.0 | |
| connect-iq | le | 4.1.7 |
Related
cve
cve
CVE-2023-23300
2023-05-23 20:15:09
cvelist
cvelist
CVE-2023-23300
2023-05-23 00:00:00
nvd
nvd
CVE-2023-23300
2023-05-23 20:15:09