CVE-2022-22657: Apple Garageband

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Affected products

• Apple Garageband: before 10.4.6 (fixed in 10.4.6)
• Apple Logic Pro X: before 10.7.3 (fixed in 10.7.3)
• Apple macOS: before 12.3 (fixed in 12.3)

Published 2022-03-18. Last modified 2026-06-17.