CVE-2026-92612

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

EUVD-2026-83882

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

CVE-2026-92612

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

CVE-2026-92612

Eclipse iceoryx2 versions greater than v0.8.0 are affected by a vulnerability in the StaticString type. The type exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. This allows an application to cr...

CVE-2026-92612

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

CVE-2026-92612

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

CVE-2026-92612: Exposed Dangerous Method or Function

In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavio...

Unsoundness in UTF-8 'String' trait

The String API in iceoryx2-bb-container exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust...

iceoryx2 (>=0.0.4, <=0.3.0), iceoryx2-bb-lock-free (>=0.0.4, <=0.3.0) +6 more potentially affected by CVE-2026-92612 via iceoryx2-bb-container (>=0.0.3, <=0.3.0)

iceoryx2-bb-container CARGO version =0.0.3, =0.0.4, =0.0.4, =0.0.4, =0.0.3, =0.0.3, =0.0.4, =0.0.4, =0.0.4, =0.3.0 Source cves: CVE-2026-92612 Source advisory: OSV:RUSTSEC-2026-0294...

RUSTSEC-2026-0294 Unsoundness in UTF-8 'String' trait

The String API in iceoryx2-bb-container exposes its contents as mutable bytes through safe APIs, while String::asstr converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust...

PT-2026-96070

Name of the Vulnerable Software and Affected Versions Eclipse iceoryx2 versions greater than v0.8.0 Description The StaticString component exposes its contents as mutable bytes through safe APIs. The String::as str function converts these bytes into a Rust string slice without validating UTF-8...