Low severityNVD Advisory· Published Sep 21, 2026· Updated Sep 21, 2026
CVE-2026-92612
CVE-2026-92612
Description
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: >0.8.0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.