CWE-704: Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.
A kind of CWE-1474 Non-Equivalent Data Transformation.
From the CWE List. © The MITRE Corporation.
Newest
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8791, mt8797, mt8798 +1 moreIn audio DSP, there is a possible memory corruption due to improper casting. This could lead to...6.7 Medium
- libpq project libpq, pg-native project pg-native +1 moreDenial of Service (DoS)7.5 High
- apple swift, swift project corelib-foundation +1 moreSwift-corelibs-foundation denial of service in JSON decoding with JSONDecoder7.5 High
- imagemagick, fedoraproject fedora, redhat enterprise linux +2 moreIn ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte...7.8 High
- ipmatcher project ipmatcher, watsonwebserver project watsonwebserver +1 moreImproper Input Validation in IpMatcher9.8 Critical
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +4 more +6 morePossible buffer overflow to improper validation of hash segment of file while allocating memory...8.1 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +4 more +6 morePossible out of bounds read due to improper typecasting while handling page fault for global...8.4 High
- jhead project jheadA Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the...5.5 Medium
- pmmp pocketmine-mpPocketMine-MP before 4.2.3 Denial of Service via NBT Metadata7.1 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +155 more +157 morePossible out of bounds access due to improper input validation during graphics profiling in...8.4 High
- linux kernel, fedoraproject fedora, oracle communications cloud native core binding support function +2 more +4 moreA flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP...5.5 Medium
- nanoid project nanoidInformation Exposure4.0 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +108 more +110 morePossible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and...7.5 High
- huawei harmonyosThe HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 High
- google androidIn setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, qualcomm aqt1000 firmware, qca6390 firmware +82 more +84 moreIncorrect pointer argument passed to trusted application TA could result in un-intended memory...7.8 High
- cachethq cachet, catchethq catchet +1 moreForced reinstall8.8 High
- gnu glibc, debian linux, netapp active iq unified manager +7 more +9 moreThe wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary...9.1 Critical
- debian linux, fedoraproject fedora, isync project isync +2 moreA flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a...7.8 High
- anymap project anymapIncorrect cast in anymap9.8 Critical
- data\ \, netapp snapcenter +1 moreThe Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero...7.5 High
- fedoraproject fedora, net\ \ +1 moreThe Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero...7.5 High
- netmask project netmaskImproper parsing of octal bytes in netmask9.1 Critical
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- gallagher command centreType confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or...8.8 High
- google androidIn SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code...7.8 High
- accusoft imagegearA memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of...8.1 High
- gitlabIn GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override...6.3 Medium
- google chromeBad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially...8.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8098 firmware +34 more +36 moreOut of bound memory access while processing ese transmit command due to passing Response buffer...7.8 High
- bigint project bigintUnsoundness in bigint9.8 Critical
- os str bytes project str bytesos_str_bytes relies on undefined behavior of `char::from_u32_unchecked`7.5 High
- autodesk fbx software development kitA type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...8.8 High
- linux kernelsnd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info-...7.8 High
- google flatbuffersDangling reference in flatbuffers7.5 High
- forcepoint ngfw security management center, next generation firewall security management center +1 moreForcepoint NGFW Security Management Center (SMC) versions lower than 6.5.12 or 6.7.1 have a rare...5.9 Medium
- google blink, chrome on 64-bit platforms +1 moreA wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12...9.8 Critical
- google blinkWebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks...9.8 Critical
- google flatbuffersUnsound casting in flatbuffers9.8 Critical
- gonitro nitropdfAn exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A...7.5 High
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +2 moreCisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability6.8 Medium
- php ext-httpA type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl...9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreIncorrect Privilege Assignment in Jenkins Script Security Plugin8.8 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm mdm9150 firmware, mdm9206 firmware +38 more +40 moreImproper casting of structure while handling the buffer leads to out of bound read in display in...7.8 High
- androidIn HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to...9.8 Critical
- rust-random randUnaligned memory access in rand_core9.8 Critical
- apple macos, mac os x +1 moreA type confusion issue was addressed with improved memory handling. This issue affected versions...7.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreAn incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a...8.8 High
- Show moreLoading…