https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:29:08.521229+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-212917 EUVD-2026-212917 2026-10-09T20:29:08.595457+00:00 EUVD-2026-212917 https://cve.radiocsirt.org/vuln/fkie_cve-2023-23306 fkie_cve-2023-23306 2026-10-09T20:29:08.595512+00:00

The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which can result in an out-of-bounds write operation. A malicious application could create a specially crafted `Toybox.Ant.BurstPayload` object, call its `add` method, override arbitrary memory and hijack the execution of the device's firmware.

 https://cve.radiocsirt.org/vuln/ghsa-r7vh-g6cm-2j84 GHSA-r7vh-g6cm-2j84 2026-10-09T20:29:08.595572+00:00

The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which can result in an out-of-bounds write operation. A malicious application could create a specially crafted `Toybox.Ant.BurstPayload` object, call its `add` method, override arbitrary memory and hijack the execution of the device's firmware.

 https://cve.radiocsirt.org/vuln/gsd-2023-23306 gsd-2023-23306 2026-10-09T20:29:08.595608+00:00 gsd-2023-23306