CVE Feed

    Dashboard / CVE / CVE-2017-2372

    CVE-2017-2372

    An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.

    Published:Feb 20, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 20, 2017
    EPSS Score:0.0085
    CVSS Score:8.8

    Affected Products

    Vendor
    Apple
    Product
    Garageband
    Vendor
    Apple
    Product
    Logic Pro X

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-44142 (CVSS 7.8) — The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a m…
    CVE-2023-42867 (CVSS 7.8) — This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed …
    CVE-2024-23300 (CVSS 7.8) — A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.1…
    CVE-2022-22664 (CVSS 7.8) — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, Ga…
    CVE-2022-22657 (CVSS 7.8) — A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10…
    CVE-2021-30654 (CVSS 5.5) — This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A loca…
    CVE-2017-2374 (CVSS 7.8) — An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves th…
    CVE-2009-2198 (CVSS 4.3) — Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes i…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High