Skip to content
1.0 Low

CVE-2026-92612 In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe…

Description

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.

Affected products and versions

Product Affected versions Fixed in
Eclipse iceoryx™ 0.8 0.8.1 → latest No fix stated
Track this CVE