Iceoryx2 bb container: Unsoundness
Affects iceoryx2-bb-containerSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 0.10.0
Data as of 11 Nov 2026, 11:34 UTC
What to do
Upgrade iceoryx2-bb-container to 0.10.0.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
crates.ioiceoryx2-bb-containerpkg:cargo/iceoryx2-bb-containerOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to iceoryx2-bb-container version 0.10.0 or later, where the unsafe APIs have been removed and the UTF-8 validation issue has been fixed. No other mitigation is required as the patch fully addresses the vulnerability.
Description
The iceoryx2-bb-container String API allowed mutable access to its contents as bytes without validating UTF-8 when converting to a string slice, enabling creation of invalid &str references and triggering undefined behavior in safe Rust code. This unsoundness was addressed by removing unsafe API methods and fixing the issue in version 0.10.0.