Garmin Connect vulnerabilities

• garmin connect-iq The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from... CVE-2023-23306 9.8 CriticalMay 23, 2023
• garmin connect-iq The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer... CVE-2023-23305 9.8 CriticalMay 23, 2023
• garmin connect-iq The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a... CVE-2023-23304 9.1 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1... CVE-2023-23303 9.8 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7... CVE-2023-23302 9.8 CriticalMay 23, 2023
• garmin connect-iq The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that... CVE-2023-23301 9.8 CriticalMay 23, 2023
• garmin connect-iq The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7... CVE-2023-23300 9.8 CriticalMay 23, 2023
• garmin connect-iq The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1... CVE-2023-23299 7.5 HighMay 23, 2023
• garmin connect-iq The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7... CVE-2023-23298 9.8 CriticalMay 23, 2023
• garmin connect In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from... CVE-2022-46081 Disputed 7.5 HighJanuary 4, 2023