CVE-2024-23300

A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

• CWE-416
• CWE-416

• https://support.apple.com/en-us/120885
• http://seclists.org/fulldisclosure/2024/Mar/27Mailing List
• https://support.apple.com/en-us/HT214090Vendor Advisory
• https://support.apple.com/kb/HT214090

Published

Mar 12, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23295A permissions issue was addressed to help ensure Personas ar…5.5
• CVE-2024-23296A memory corruption issue was addressed with improved valida…7.8
• CVE-2024-23297The issue was addressed with improved checks. This issue is …5.5
• CVE-2024-23298A logic issue was addressed with improved state management. …5.5
• CVE-2024-23299The issue was addressed with improved checks. This issue is …8.6
• CVE-2024-2330A vulnerability was found in Netentsec NS-ASG Application Se…9.8
• CVE-2024-23301Relax-and-Recover (aka ReaR) through 2.7 creates a world-rea…5.5
• CVE-2024-23302Couchbase Server before 7.2.4 has a private key leak in goxd…7.5
• CVE-2024-23304Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote un…7.5
• CVE-2024-23305An out-of-bounds write vulnerability exists in the BrainVisi…9.8
• CVE-2024-23306A vulnerability exists in BIG-IP Next CNF and SPK systems th…7.1
• CVE-2024-23307Integer Overflow or Wraparound vulnerability in Linux Linux …7.8