Memory Safety Issue in Eclipse iceoryx2 Software

CVE-2026-92612

What is CVE-2026-92612?

The Eclipse iceoryx2 software, specifically in versions beyond v0.8.0, presents a vulnerability where the StaticString can reveal its contents as mutable bytes via safe APIs. The associated method String::as_str() can convert these bytes into a Rust string slice without ensuring proper UTF-8 encoding. This flaw allows applications to create invalid string slices, potentially triggering undefined behavior despite the Rust programming language's emphasis on safety. Developers utilizing this version should exercise caution and review their implementations to avoid potential errors stemming from this vulnerability.

References