CVE-2023-23300: Buffer Copy without Checking Size of Input

The Toybox.Cryptography.Cipher.initialize API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted parameters and hijack the execution of the...

PT-2023-18895

Name of the Vulnerable Software and Affected Versions CIQ API versions 3.0.0 through 4.1.7 Description The issue concerns the Toybox.Cryptography.Cipher.initialize API method, which does not validate its parameters. This lack of validation can lead to buffer overflows when copying data, potential...