Apple GarageBand

CPE Details

Apple GarageBand
apple
garageband
-
2025-02-19
11h43 +00:00
2025-02-19
11h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:apple:garageband:-:*:*:*:*:*:*:*

Informations

Vendor

apple

Product

garageband

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-44142 2025-01-30 18h49 +00:00 The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution.
7.8
High
CVE-2023-42867 2024-12-20 03h37 +00:00 This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.
7.8
High
CVE-2024-23300 2024-03-12 20h33 +00:00 A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
7.8
High
CVE-2022-22664 2022-03-18 17h00 +00:00 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
7.8
High
CVE-2022-22657 2022-03-18 17h00 +00:00 A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
7.8
High
CVE-2021-30654 2021-09-08 12h47 +00:00 This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.
5.5
Medium
CVE-2017-2372 2017-02-20 07h35 +00:00 An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.
8.8
High
CVE-2017-2374 2017-02-20 07h35 +00:00 An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted GarageBand project file.
7.8
High
CVE-2009-2198 2009-08-04 14h13 +00:00 Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.
4.3