CVE-2024-23300: Use After Free
A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Other sources
GarageBand. A use-after-free issue was addressed with improved memory management.
— Apple
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2024-23300?
CVE-2024-23300 is considered a critical vulnerability due to its potential to lead to arbitrary code execution.
How do I fix CVE-2024-23300?
To fix CVE-2024-23300, update GarageBand to version 10.4.11 or later.
What could happen if I ignore CVE-2024-23300?
Ignoring CVE-2024-23300 could result in unexpected app termination or allow malicious actors to execute arbitrary code.
Which versions of GarageBand are affected by CVE-2024-23300?
Versions of GarageBand prior to 10.4.11 are affected by CVE-2024-23300.
What type of issue is CVE-2024-23300?
CVE-2024-23300 is a use-after-free issue that was addressed through improved memory management.