2 matches found
CVE-2023-23303
The Toybox.Ant.GenericChannel.enableEncryption API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the...
9.8CVSS7.5AI score0.00792EPSS
SaveExploits1References3
Buffer overflow
The Toybox.Ant.GenericChannel.enableEncryption API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the...
7.5CVSS9.4AI score0.00792EPSS
SaveExploits1References2Affected Software1
20