CVE-2024-44142: High severity Apple GarageB vulnerability
Published Jan 30, 2025
·Updated
GarageBand. The issue was addressed with improved bounds checks.
Other sources
The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a maliciously crafted image may lead to arbitrary code execution.
— MITRE
Credit
Marc Schoenefeld, Dr. rer. nat.
Affected Software
2 affected components
Apple GarageB
Apple GarageBand<10.4.12
Event History
Jan 30, 2025
CVE Published
via MITRE·06:49 PM
Data Sourced
via MITRE·06:49 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-44142?
CVE-2024-44142 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-44142?
To fix CVE-2024-44142, update GarageBand to version 10.4.12 or later.
3
What types of systems are affected by CVE-2024-44142?
CVE-2024-44142 affects systems running Apple GarageBand.
4
What happens if I don't address CVE-2024-44142?
If left unaddressed, CVE-2024-44142 could allow attackers to execute arbitrary code on your system.
5
Is CVE-2024-44142 related to image processing?
Yes, CVE-2024-44142 involves processing maliciously crafted images which can lead to security vulnerabilities.