CVE-2017-2372

CVE-2017-2372 describes a memory corruption that affects Apple GarageBand and Logic Pro X via crafted GarageBand project files. Public sources (Talos) detail an out-of-bounds write in the parsing/serialization path of saved GarageBand project data, triggered when reading data from a user-controll...

CVE-2022-22664

CVE-2022-22664 affects macOS/macOS apps (Logic Pro 10.7.3, GarageBand 10.4.6) and macOS Monterey 12.3 via an out-of-bounds read fixed by improved bounds checking. Apple security pages list CVE-2022-22664 under GarageBand MIDI and Logic Pro-related updates, with fixes in these versions to prevent ...

CVE-2022-22657

CVE-2022-22657 is a memory initialization issue that Apple fixed in Logic Pro 10.7.3, GarageBand 10.4.6, and macOS Monterey 12.3. The Apple advisories indicate this issue affects MIDI handling (Memory initialization) and could cause opening a maliciously crafted file to terminate the application ...