CVE-2017-2374

Name of the Vulnerable Software and Affected Versions GarageBand versions prior to 10.1.6

Description The issue involves the Projects component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted GarageBand project file.

Recommendations For GarageBand versions prior to 10.1.6, update to version 10.1.6 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted GarageBand project files to minimize the risk of exploitation.