CVE Feed

    Dashboard / CVE / CVE-2023-42867

    CVE-2023-42867

    This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.

    Published:Dec 20, 2024
    Last Modified:Nov 4, 2025
    EPS:Dec 20, 2024
    EPSS Score:0.00095
    CVSS Score:7.8

    Affected Products

    Vendor
    Apple
    Product
    Garageband

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2024-44142 (CVSS 7.8) — The issue was addressed with improved bounds checks. This issue is fixed in GarageBand 10.4.12. Processing a m…
    CVE-2024-23300 (CVSS 7.8) — A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.1…
    CVE-2022-22664 (CVSS 7.8) — An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, Ga…
    CVE-2022-22657 (CVSS 7.8) — A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10…
    CVE-2021-30654 (CVSS 5.5) — This issue was addressed by removing additional entitlements. This issue is fixed in GarageBand 10.4.3. A loca…
    CVE-2017-2372 (CVSS 8.8) — An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10…
    CVE-2017-2374 (CVSS 7.8) — An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves th…
    CVE-2009-2198 (CVSS 4.3) — Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes i…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High