CVE-2026-92612
2026-09-21
11h17 +00:00
11h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as_str() converts those bytes into a Rust string slice without validating UTF-8. An application can therefore create an invalid &str and trigger undefined behavior using entirely safe Rust.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Exposed Dangerous Method or Function The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted. |
