CVE Feed

    Dashboard / CVE / CVE-2021-30654

    CVE-2021-30654

    This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A local attacker may be able to read sensitive information.

    Published:Sep 8, 2021
    Last Modified:Nov 21, 2024
    EPS:Sep 8, 2021
    EPSS Score:0.00129
    CVSS Score:5.5

    Affected Products

    Vendor
    Apple
    Product
    Garageband

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-44142 (CVSS 7.8) — The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a m…
    CVE-2023-42867 (CVSS 7.8) — This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed …
    CVE-2024-23300 (CVSS 7.8) — A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.1…
    CVE-2022-22664 (CVSS 7.8) — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, Ga…
    CVE-2022-22657 (CVSS 7.8) — A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10…
    CVE-2017-2372 (CVSS 8.8) — An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10…
    CVE-2017-2374 (CVSS 7.8) — An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves th…
    CVE-2009-2198 (CVSS 4.3) — Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes i…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High