CVE-2020-27486

CVE-2020-27486 affects Garmin Forerunner 235 prior to firmware 8.20. The vulnerability is a buffer overflow in the ConnectIQ TVM when parsing the string length in a PRG file; a malicious ConnectIQ app store application could cause heap corruption by copying data beyond the allocated length. The a...

CVE-2020-27486

Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length...