CVE-2024-23300

2024-03-1221:15:58

[email protected]

web.nvd.nist.gov

garageband

use-after-free

vulnerability

memory management

malicious file

code execution

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

References

seclists.org/fulldisclosure/2024/Mar/27

support.apple.com/en-us/HT214090