CVE-2023-42867

published 2024-12-20

CVE-2023-42867: This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageBand 10.4.9. An app may be able to gain root privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	garageband	< 10.4.9	10.4.9
apple	garageband	>= unspecified < 10.4.9	10.4.9

CWE-281