CVE-2017-2372

CVE-2017-2372 describes a memory corruption that affects Apple GarageBand and Logic Pro X via crafted GarageBand project files. Public sources (Talos) detail an out-of-bounds write in the parsing/serialization path of saved GarageBand project data, triggered when reading data from a user-controll...

Apple Releases Security Updates

Apple has released security updates to address multiple vulnerabilities in several products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Apple security pages for the followin...

Memory Corruption Vulnerability in Apple Logic Pro X and GarageBand

Apple Logic Pro x is an official music production and editing software from Apple; GarageBand is a music performance, synthesis, and recording tool for Apple machines. A memory corruption vulnerability exists in Apple Logic Pro X and GarageBand. An attacker could exploit the vulnerabilities to...

About the security content of Logic Pro X 10.3

About the security content of Logic Pro X 10.3 This document describes the security content of Logic Pro X 10.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...