← Database

CVE-2026-92612

N/A CVSS: N/A Published: 2026-09-21 Modified: 2026-09-21

Description

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.

Affected Platforms

Unknown

Weakness Type

CWE-749

References