PT-2022-15605

CVE-2022-22657

·

Published

2022-03-14

·

Updated

2022-03-25

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Logic Pro versions prior to 10.7.3 GarageBand versions prior to 10.4.6 macOS Monterey versions prior to 12.3
Description A memory initialization issue was addressed with improved memory handling. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.
Recommendations For Logic Pro versions prior to 10.7.3, update to version 10.7.3 to resolve the issue. For GarageBand versions prior to 10.4.6, update to version 10.4.6 to resolve the issue. For macOS Monterey versions prior to 12.3, update to version 12.3 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾