https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T22:25:21.356833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/ghsa-3fg9-hcq5-vxrc GHSA-3fg9-hcq5-vxrc — iana-time-zone vulnerable to use after free in MacOS / iOS implementation 2026-10-25T22:25:21.357954+00:00

Affected: crates.io: iana-time-zone

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced.

The copied system time zone was released before its name was copied. If the system time zone was changed between the call of `CFRelease` and `str::to_owned()`, random memory would be copied.