N/A

Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the string length provided in the data section of the PRG file. It allocates memory for the string immediately, and then copies the string into the TVM object by using a function similar to strcpy. This copy can exceed the length of the allocated string data and overwrite heap data. A successful exploit would allow a ConnectIQ app store application to escape and perform activities outside the restricted application execution environment.

N/A

N/A

Garmin Forerunner 235 缓冲区漏洞

Garmin Forerunner 235是瑞士佳明（Garmin）公司的一款电子腕表。 Garmin Forerunner 235 8.20之前版本 ConnectIQ TVM 存在缓冲区漏洞，该漏洞允许攻击者将恶意的ConnectIQ应用程序上传到ConnectIQ存储。 ConnectIQ程序解释器信任PRG文件的data部分中提供的字符串长度。 它立即为字符串分配内存，然后使用类似于strcpy的函数将字符串复制到TVM对象中。 此副本可以超过分配的字符串数据的长度，并覆盖堆数据。 成功的利用将使

N/A

N/A