PT-2023-18892

Name of the Vulnerable Software and Affected Versions CIQ API versions 2.3.0 through 4.1.7 Description The Toybox.Graphics.BufferedBitmap.initialize API method does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious...

CVE-2023-23298: Integer Overflow or Wraparound

The Toybox.Graphics.BufferedBitmap.initialize API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters...