CVE-2020-27483: Out-of-bounds Read
First published: Mon Nov 16 2020(Updated: )
Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided for the stack value duplication instruction, DUP. The offset is unchecked and memory prior to the start of the execution stack can be read and treated as a TVM object. A successful exploit could use the vulnerability to leak runtime information such as the heap handle or pointer for a number of TVM context variables. Some reachable values may be controlled enough to forge a TVM object on the stack, leading to possible remote code execution.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Garmin Forerunner 235 Firmware | >=7.90<8.20 | |
| Garmin Forerunner 235 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-27483?
CVE-2020-27483 is classified as a medium severity vulnerability due to the potential for exploitation through malicious applications.
How do I fix CVE-2020-27483?
To mitigate CVE-2020-27483, users should update their Garmin Forerunner 235 firmware to version 8.20 or later.
What impact does CVE-2020-27483 have on users?
CVE-2020-27483 allows attackers to exploit an array index error, potentially leading to application crashes or unauthorized access.
Who is affected by CVE-2020-27483?
Users of Garmin Forerunner 235 devices running firmware versions before 8.20 are impacted by CVE-2020-27483.
What actions can attackers take with CVE-2020-27483?
Attackers can upload a malicious ConnectIQ application to the store, which could exploit the array index error in affected devices.
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/garmin
- canonical/garmin forerunner 235 firmware
- version/garmin forerunner 235 firmware/7.90