Skip to content
fr Sign in
7.8 High

CVE-2023-42867 This issue was addressed with improved validation of the process entitlement and Team ID

Description

This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.

Affected products and versions

Product Affected versions Fixed in
GarageBand 10.4 earliest → < 10.4.9 10.4.9

References

Timeline

  1. Published
  2. Last modified

Other CVEs of GarageBand

The 4 CVEs of GarageBand →
CVE-2024-44142 The issue was addressed with improved bounds checks 7.8 High CVE-2024-23300 A use-after-free issue was addressed with improved memory management 7.8 High CVE-2021-30654 This issue was addressed by removing additional entitlements Not rated
Track this CVE