Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-3fg9-hcq5-vxrc: iana-time-zone vulnerable to use after free in MacOS / iOS implementation

In iana-time-zone v0.1.43 a use-after-free bug in the MacOS / iOS implementation was introduced.

The copied system time zone was released before its name was copied. If the system time zone was changed between the call of CFRelease and str::to_owned(), random memory would be copied.

ghsa
#ios#mac#git

iana-time-zone vulnerable to use after free in MacOS / iOS implementation

Moderate severity GitHub Reviewed Published Aug 30, 2022 • Updated Aug 30, 2022

ghsa: Latest News

GHSA-rm76-4mrf-v9r8: vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache