CVE-2023-23303

The CVE-2023-23303 vulnerability affects Garmin Connect IQ CIQ API (Toybox.Ant.GenericChannel.enableEncryption) across versions 3.2.0–4.1.7. The issue arises because the API does not validate its parameter, enabling buffer overflows when copying various attributes. A malicious application could c...

CVE-2023-23301

The CVE-2023-23301 issue affects CIQ API versions 1.0.0 through 4.1.7, where the news MonkeyC operation code fails to ensure string resources don’t extend past section boundaries. This can allow a malicious CIQ application to craft a string starting near a section end whose length overflows past ...

CVE-2023-23304

The CVE-2023-23304 entry concerns GarminOS CIQ/TVM (Garmin Connect IQ): CIQ API versions 2.1.0 through 4.1.7 allow a specially crafted head section to access the Toybox.SensorHistory module without user consent, enabling a malicious app to call functions in that module and potentially disclose pr...

PT-2023-18896 · Garmin · Ciq Api

Name of the Vulnerable Software and Affected Versions: CIQ API versions 1.0.0 through 4.1.7 Description: The issue arises from the news MonkeyC operation code in the CIQ API, which fails to properly check string resources, allowing them to extend past the expected sections. A malicious CIQ...

CVE-2023-23299

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data...

CVE-2023-23300

The Toybox.Cryptography.Cipher.initialize API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can result in buffer overflows when copying data. A malicious application could call the API method with specially crafted parameters and hijack the execution of the...

CVE-2023-23303

The Toybox.Ant.GenericChannel.enableEncryption API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which can result in buffer overflows when copying various attributes. A malicious application could call the API method with specially crafted object and hijack the...

CVE-2023-23299

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data...

CVE-2023-23298

The CVE-2023-23298 issue affects Garmin CIQ API: Toybox.Graphics.BufferedBitmap.initialize at CIQ API versions 2.3.0 through 4.1.7. Root cause is lack of parameter validation that can trigger integer overflows during bitmap buffer allocation, potentially allowing malicious input to hijack firmwar...

CVE-2023-23305

The CVE-2023-23305 entry concerns the GarminOS TVM component in CIQ API versions 1.0.0 through 4.1.7, which is reported to be vulnerable to various buffer overflows when loading binary resources. This could allow a malicious application embedding crafted resources to hijack firmware execution. Se...

CVE-2023-23299

The CVE concerns GarminOS TVM’s permission system for the CIQ API. Affected component: GarminOS TVM within CIQ API versions 1.0.0–4.1.7. Root cause: the permission model can be bypassed entirely, enabling a malicious application with specially crafted code/data sections to access restricted CIQ m...

CVE-2023-23298

The Toybox.Graphics.BufferedBitmap.initialize API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result in integer overflows when allocating the underlying bitmap buffer. A malicious application could call the API method with specially crafted parameters...

PT-2023-18901 · Ciq Api · Ciq Api

Name of the Vulnerable Software and Affected Versions: CIQ API versions 2.2.0 through 4.1.7 Description: The Toybox.Ant.BurstPayload.add API method suffers from a type confusion issue, which can result in an out-of-bounds write operation. A malicious application could create a specially crafted...

CVE-2023-23301

The news MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the end of the expected sections. A malicious CIQ application could craft a string that starts near the end of a section, and whose length extends past its end. Upon...