CVE-2024-44142

Name of the Vulnerable Software and Affected Versions GarageBand versions prior to 10.4.12

Description The issue was addressed with improved bounds checks. Processing a maliciously crafted image may lead to arbitrary code execution. The problem was fixed by improving bounds checks, and it was reported by Mark Schenfeld, Ph.D.

Recommendations For GarageBand versions prior to 10.4.12, update to version 10.4.12 to resolve the issue. As a temporary workaround, consider avoiding the processing of images from untrusted sources until the update is applied.