CVE-2023-27960

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand...

CVE-2023-27938

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

CVE-2023-27938

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

Code injection

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand...

Input validation

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

CVE-2023-27960

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand...

CVE-2023-27938

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

CVE-2023-27960

This issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for macOS 10.4.8. An app may be able to gain elevated privileges during the installation of GarageBand...

CVE-2023-27938

CVE-2023-27938 affects Apple GarageBand for macOS, where an out-of-bounds read occurs while parsing a malicious MIDI file. The underlying issue stems from improper input handling in the MIDI parsing code, resolved by input validation improvements and a patch in GarageBand for macOS 10.4.8. Impact...

CVE-2023-27960

CVE-2023-27960 affects GarageBand for macOS prior to 10.4.8. The root cause is insufficient access controls that may allow an app to gain elevated privileges during GarageBand’s installation. Apple’s security content confirms the fix in 10.4.8 and describes the impact as privilege escalation duri...

CVE-2023-27938

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 10.4.8. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

PT-2023-21435 · Apple · Garageband

Name of the Vulnerable Software and Affected Versions: GarageBand versions prior to 10.4.8 Description: An out-of-bounds read issue was addressed with improved input validation. Parsing a maliciously crafted MIDI file may lead to an unexpected application termination or arbitrary code execution...

The software for creating music or podcasts in Apple GarageBand on the MacOS operating system is vulnerable, allowing attackers to exploit this vulnerability to gain higher privileges.

The vulnerability of the Apple GarageBand software for creating music or podcasts on the MacOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

About the security content of GarageBand for macOS 10.4.8

About the security content of GarageBand for macOS 10.4.8 This document describes the security content of GarageBand for macOS 10.4.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

PT-2023-1866 · Apple · Garageband

Name of the Vulnerable Software and Affected Versions: GarageBand for macOS versions prior to 10.4.8 Description: The issue is related to insufficient access controls in GarageBand for macOS, which may allow an attacker to gain elevated privileges. This can occur during the installation of...

About the security content of macOS Big Sur 11.7

About the security content of macOS Big Sur 11.7 This document describes the security content of macOS Big Sur 11.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

CVE-2022-22664

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22664

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22664

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22657

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...