Apple Logic Pro X vulnerabilities

CVE-2017-2372 [HIGH] CWE-119 CVE-2017-2372: An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X An issue was discovered in certain Apple products. GarageBand before 10.1.5 is affected. Logic Pro X before 10.3 is affected. The issue involves the "Projects" component, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.

CVE-2022-22657 [HIGH] CWE-665 CVE-2022-22657: A memory initialization issue was addressed with improved memory handling. This issue is fixed in Lo A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

CVE-2022-22664 [HIGH] CWE-125 CVE-2022-22664: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

CVE-2017-2374 [HIGH] CVE-2017-2374: Logic Pro X 10.3.1 Apple Security Update: About the security content of Logic Pro X 10.3.1 Product: Logic Pro X Version: 10.3.1 CVE: CVE-2017-2374 Component: Projects Impact: Opening a maliciously crafted GarageBand project file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved memory handling.