← Database

CVE-2023-23305

CRITICAL CVSS: 9.8 Published: 2023-05-23 Modified: 2026-06-17

Description

The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading binary resources. A malicious application embedding specially crafted resources could hijack the execution of the device's firmware.

Affected Platforms

Garmin Connect-Iq

Weakness Type

CWE-120, CWE-120

References