Garmin vulnerabilities

Products

• Connect-iq 9
• Empirbus Wireless Display Unit Firmware 4
• Forerunner 235 Firmware 4

Newest

• garmin empirbus wireless display unit firmware The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to... CVE-2025-27853 7.3 HighMay 13, 2026
• garmin empirbus wireless display unit firmware The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site... CVE-2025-27852 5.0 MediumMay 13, 2026
• garmin empirbus wireless display unit firmware The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin... CVE-2025-27851 9.3 CriticalMay 13, 2026
• garmin empirbus wireless display unit firmware The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a... CVE-2025-27850 7.5 HighMay 13, 2026
• garmin connect-iq The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from... CVE-2023-23306 9.8 CriticalMay 23, 2023
• garmin connect-iq The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer... CVE-2023-23305 9.8 CriticalMay 23, 2023
• garmin connect-iq The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a... CVE-2023-23304 9.1 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1... CVE-2023-23303 9.8 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7... CVE-2023-23302 9.8 CriticalMay 23, 2023
• garmin connect-iq The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that... CVE-2023-23301 9.8 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7... CVE-2023-23300 9.8 CriticalMay 23, 2023
• garmin connect-iq The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1... CVE-2023-23299 7.5 HighMay 23, 2023
• garmin connect-iq The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7... CVE-2023-23298 9.8 CriticalMay 23, 2023
• garmin connect In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from... CVE-2022-46081 Disputed 7.5 HighJanuary 4, 2023
• garmin forerunner 235 firmware Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ... CVE-2020-27483 9.9 CriticalNovember 16, 2020
• garmin forerunner 235 firmware Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. The component is: ConnectIQ... CVE-2020-27484 9.9 CriticalNovember 16, 2020
• garmin forerunner 235 firmware Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ... CVE-2020-27485 9.9 CriticalNovember 16, 2020
• garmin forerunner 235 firmware Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. The component is: ConnectIQ... CVE-2020-27486 9.9 CriticalNovember 16, 2020
• garmin communicator plugin The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in... CVE-2009-0194 9.3 HighMay 11, 2009