TI-2017-01653 CVE-2017-2372 · GHSA-cwj8-ghw3-498v
Memory corruption in Apple Projects
Priority MEDIUM 42
An issue was discovered in certain Apple products.
Apple
Records9537All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical1131CVSS 9.0–10.0
CVSS high3512CVSS 7.0–8.9
Exploited now
Apple records in CISA KEVTI-2024-18448 Apple Multiple Products Improper Authentication Vulnerability TI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2026-59424 Apple Multiple Products Out-of-Bounds Write Vulnerability TI-2026-46583 Apple macOS Improper Authentication Vulnerability TI-2025-22512 Apple Multiple Products Buffer Overflow Vulnerability TI-2025-28211 Apple Multiple Products Improper Locking Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Garageband · all components
TI-2017-01655 CVE-2017-2374 · GHSA-r42w-3527-hfjh
Memory corruption in Apple Projects
Priority LOW 37
An issue was discovered in certain Apple products.
TI-2024-29711 CVE-2024-44142 · GHSA-jh3j-ppfx-qrwc
Apple GarageBand: Processing a maliciously crafted image may lead to arbitrary code…
Priority LOW 36
The issue was addressed with improved bounds checks.
TI-2024-15405 CVE-2024-23300 · GHSA-5r6q-rqqp-8fc4
Use after free in Apple GarageBand
Priority LOW 36
A use-after-free issue was addressed with improved memory management.
TI-2022-06926 CVE-2022-22664 · GHSA-hj73-j422-chpp
Out-of-bounds read in Apple macOS
Priority LOW 36
An out-of-bounds read was addressed with improved bounds checking.
TI-2022-06919 CVE-2022-22657 · GHSA-m6rc-jrf5-mqjx
Apple macOS: Opening a maliciously crafted file may lead to unexpected application…
Priority LOW 36
A memory initialization issue was addressed with improved memory handling.
TI-2023-22952 CVE-2023-42867 · GHSA-x99p-qwh9-pfqr
Apple GarageBand: An app may be able to gain root privileges
Priority LOW 35
This issue was addressed with improved validation of the process entitlement and Team ID.
TI-2021-11039 CVE-2021-30654 · GHSA-3489-8qg3-xgj4
Apple GarageBand: A local attacker may be able to read sensitive information
Priority LOW 24
This issue was addressed by removing additional entitlements.
TI-2009-02105 CVE-2009-2198 · GHSA-8f2f-mjxj-j85g
Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of…
Priority LOW 23
Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.