CVE-2024-23300

HIGH

GarageBand < 10.4.11 - Use-After-Free via Maliciously Crafted File

Title source: llm
STIX 2.1

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

References (4)

Core 4

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 35.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (2)
apple/garageband < 10.4.11
Apple/GarageBand < 10.4.11
Published Mar 12, 2024
Tracked Since Feb 18, 2026