CVE-2026-92612 | BDVDB-2026-377479 Detail

Description#

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-21Record published in the CVE List.