GarageBand for Mac Updated With Important Security Fix

[MacRumors]

Apple this week updated GarageBand for Mac with an important security fix. Users should update the app as soon as possible due to this security vulnerability.

In a support document for the new GarageBand version, Apple said "a use-after-free issue was addressed with improved memory management":

GarageBand

Available for: macOS Ventura and macOS Sonoma

Impact: Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

Description: A use-after-free issue was addressed with improved memory management.

CVE-2024-23300: Marc Schoenefeld, Dr. rer. nat.

GarageBand version 10.4.11 is available on the Mac App Store. The update also includes stability improvements and bug fixes, according to Apple.

Article Link: GarageBand for Mac Updated With Important Security Fix

 

[3530025]

Yeah, the CVE's severity is indeed HIGH.

Update ASAP.

 

[Kebabselector]

Went to update, it had already done it for me.

 

[JosephAW]

What about the iOS app?
Use it to create and install ringtones. Wish they would allow developers to create ringtone installation apps. GBand is eating over 1GB of my phone just for one purpose.

 

[coffeemilktea]

Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

I knew I shouldn't have downloaded that "Baby Shark (Tropical Remix)" GarageBand file off some shady website; it was too good to be true. 😩

 

[TracerAnalog]

All I want to know is: where’s the Cory Wong producer pack??😝

 

[Bampf]

Garageband.. Now HERE's an app that Apple should port to Vision Pro. Moving tracks/instruments around in space; co-editing them with other musicians; record and playback real or "air guitar" performances of tracks..

 

[ifxf]

Now this is one of the many apps that Apple should support completely deleting on MacOS. This is where macos trails ios in the ability to delete Apple apps.

 

[Papanate]

Now this is one of the many apps that Apple should support completely deleting on MacOS. This is where macos trails ios in the ability to delete Apple apps.

Why would I want to completely delete the App if I’m using it? What do mean 'Completely Deleting’ - I do that now with any App - I use App Zapper.

 

[AppleTO]

The first thing I thought of when it comes to arbitrary code execution in GarageBand was someone adding unauthorized sound effects to a track. lmao

 

[thingstoponder]

GarageBand has been broken on my 2020 Intel iMac. It just crashes the second I try and pod basically anything like a lesson. It’s been fine in my m1 mini but I haven’t updated that for awhile because I thought it might break too Should I be worried?

 

[Jerry Fritschle]

Now this is one of the many apps that Apple should support completely deleting on MacOS. This is where macos trails ios in the ability to delete Apple apps.

If you have never used it, like other stock macOS apps, all you really need to do is drag it to the trash. It doesn't create its cache folders, etc. until it is actually launched.

 

[uacd]

No new features again