CVE-2020-27483

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

CVE-2020-27483

Garmin Forerunner 235 before 8.20 is affected by an Array index error in the ConnectIQ TVM. The attacker must upload a malicious ConnectIQ application to the ConnectIQ store; the interpreter trusts an offset for the stack value duplication instruction (DUP) that is unchecked, allowing memory befo...

CVE-2020-27484

Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check for overflow...

CVE-2020-27484

Garmin Forerunner 235 prior to version 8.20 is affected by an Integer Overflow in the ConnectIQ TVM component. The vulnerability arises when the interpreter allocates memory for the NEWA instruction, failing to check for overflow, enabling a constrained read/write primitive across the MAX32630 ad...

CVE-2020-27485

Garmin Forerunner 235 (pre-8.20) vulnerability in ConnectIQ TVM: an array index error lets a malicious ConnectIQ app store payload read/write memory outside the TVM context, enabling a use-after-free and constrained read/write primitive across the MAX32630 address space. The issue requires the at...

CVE-2020-27485

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check the index...

CVE-2020-27486

CVE-2020-27486 affects Garmin Forerunner 235 prior to firmware 8.20. The vulnerability is a buffer overflow in the ConnectIQ TVM when parsing the string length in a PRG file; a malicious ConnectIQ app store application could cause heap corruption by copying data beyond the allocated length. The a...

CVE-2020-27486

Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length...

PT-2020-16693

Name of the Vulnerable Software and Affected Versions Garmin Forerunner 235 versions prior to 8.20 Description The issue is related to an array index error in the ConnectIQ TVM component. To exploit this, an attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The...

CVE-2020-27483: Improper Validation of Array Index

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

CVE-2020-27485: Improper Validation of Array Index

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check the index...

CVE-2020-27486: Buffer Copy without Checking Size of Input

Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length...

CVE-2020-27484: Integer Overflow or Wraparound

Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check for overflow...

PT-2020-16691

Name of the Vulnerable Software and Affected Versions Garmin Forerunner 235 versions prior to 8.20 Description The issue is related to an array index error in the ConnectIQ TVM component. To exploit this, an attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The...

PT-2020-16694

Name of the Vulnerable Software and Affected Versions Garmin Forerunner 235 versions prior to 8.20 Description The issue is related to a buffer overflow in the ConnectIQ TVM component. To exploit this, an attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ...

PT-2020-16692

Name of the Vulnerable Software and Affected Versions Garmin Forerunner 235 versions prior to 8.20 Description The issue is related to an Integer Overflow in the ConnectIQ TVM component. To exploit this, an attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The Connect...