{"id":"CVE-2026-92612","aliases":["EUVD-2026-83882","GHSA-8mq4-3mwq-qvg6","GHSA-gm83-3hcx-j6jj","RUSTSEC-2026-0294"],"status":"published","title":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as...","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","severity":{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00153,"percentile":0.04485,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-749"],"published":"2026-09-18T12:00:00Z","modified":"2026-11-11T10:45:02Z","fixes":[{"ecosystem":"crates.io","package":"iceoryx2-bb-container","fixed_in":["0.10.0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"crates.io","package":"iceoryx2-bb-container","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.10.0"}]}]}],"products":[{"vendor":"eclipse foundation","product":"eclipse iceoryx™"}],"references":[{"url":"https://github.com/eclipse-iceoryx/iceoryx2/security/advisories/GHSA-8mq4-3mwq-qvg6","tags":["exploit","advisory"]},{"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/307","tags":["web"]},{"url":"https://github.com/eclipse-iceoryx/iceoryx2/releases/tag/v0.10.0","tags":["web"]},{"url":"https://crates.io/crates/iceoryx2-bb-container/0.10.0","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92612","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gm83-3hcx-j6jj"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92612.json","tags":["advisory"]},{"url":"https://crates.io/crates/iceoryx2-bb-container","tags":["package"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2026-0294.html","tags":["advisory"]},{"url":"https://github.com/eclipse-iceoryx/iceoryx2/pull/1956","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-92612","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","status":"published","published":"2026-09-21T10:47:02.731Z","modified":"2026-09-21T11:09:34.304Z","cvss":[{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low","assessor":"cna"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T13:48:24.536396Z"}],"euvd":[{"id":"EUVD-2026-83882","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","status":"published","published":"2026-09-21T10:47:02Z","modified":"2026-09-21T11:09:34Z","cvss":[{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"updated_at":"2026-11-02T17:28:05.72344Z"}],"ghsa":[{"id":"GHSA-gm83-3hcx-j6jj","title":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as...","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","status":"published","published":"2026-09-21T12:32:36Z","modified":"2026-09-21T12:32:38Z","cvss":[{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:12:14.750064Z"}],"nvd":[{"id":"CVE-2026-92612","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","status":"published","published":"2026-09-21T11:17:12.59Z","modified":"2026-09-21T18:11:49.423Z","cvss":[{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:12:50.043898Z"}],"osv":[{"id":"CVE-2026-92612","description":"In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.","status":"published","published":"2026-09-21T10:47:02.731Z","modified":"2026-10-28T02:30:57.474372436Z","cvss":[{"version":"4.0","score":1,"vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N","level":"low"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:45:20.588039Z"},{"id":"RUSTSEC-2026-0294","title":"Unsoundness in UTF-8 'String' trait","description":"The String API in iceoryx2-bb-container exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. \nAn application can therefore create an invalid \u0026str and trigger undefined behavior using entirely safe Rust.\n\nThe API methods `as_mut_bytes` and `deref_mut` where removed from the String API and their implementations (PolymorphicString, RelocatableString, and StaticString ) without replacement.\nLink to Pull-Request: https://github.com/eclipse-iceoryx/iceoryx2/pull/1956","status":"published","published":"2026-09-18T12:00:00Z","modified":"2026-11-11T10:45:02.509154109Z","updated_at":"2026-11-11T11:06:10.823198Z"}]}}