CVE-2020-27484

CVE-2020-27484 is an integer overflow vulnerability in the ConnectIQ TVM of Garmin Forerunner 235 devices running firmware before version 8.20. This flaw allows a malicious ConnectIQ application, uploaded to the ConnectIQ store, to bypass the restricted application environment. Rated as Critical with a CVSS score of 9.9, the vulnerability has a network attack vector and low privileges required, enabling a constrained read/write primitive across the device's address space, leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.