CVE-2020-27486

CVE-2020-27486 affects Garmin Forerunner 235 prior to firmware 8.20. The vulnerability is a buffer overflow in the ConnectIQ TVM when parsing the string length in a PRG file; a malicious ConnectIQ app store application could cause heap corruption by copying data beyond the allocated length. The a...

CVE-2020-27485

Garmin Forerunner 235 (pre-8.20) vulnerability in ConnectIQ TVM: an array index error lets a malicious ConnectIQ app store payload read/write memory outside the TVM context, enabling a use-after-free and constrained read/write primitive across the MAX32630 address space. The issue requires the at...

CVE-2020-27483

Garmin Forerunner 235 before 8.20 is affected by an Array index error in the ConnectIQ TVM. The attacker must upload a malicious ConnectIQ application to the ConnectIQ store; the interpreter trusts an offset for the stack value duplication instruction (DUP) that is unchecked, allowing memory befo...

CVE-2020-27484

Garmin Forerunner 235 prior to version 8.20 is affected by an Integer Overflow in the ConnectIQ TVM component. The vulnerability arises when the interpreter allocates memory for the NEWA instruction, failing to check for overflow, enabling a constrained read/write primitive across the MAX32630 ad...