CVE-2026-92612
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 21, 2026
Vendor
unknown
Description
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.