CWE-704: Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.
A kind of CWE-1474 Non-Equivalent Data Transformation.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeBad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had...8.8 High
- quickjsType confusion in string addition in QuickJS7.1 High
- debian linux, linux kernel +1 morelibceph: fix invalid accesses to ceph_connection_v1_info9.8 Critical
- arcane software vermillion ftp daemonVermillion FTP <= 1.31 Daemon PORT Command Memory Corruption9.3 Critical
- polkadot-evm frontierPolkadot Frontier's constructing smart contract can bypass precompile address bounding6.9 Medium
- pilz industrialpi 4 with industrialpi webstatusPilz: Authentication Bypass in IndustrialPI Webstatus9.8 Critical
- kunbus revolution pi webstatus, revpi status +1 moreRevPi Webstatus application is vulnerable to an authentication bypass9.8 Critical
- linux, linux kernel +1 moreperf/dwc_pcie: fix duplicate pci_dev devices5.5 Medium
- devexpressDevExpress before 23.1.3 allows arbitrary TypeConverter conversion.3.5 Low
- linux, linux kernel +1 moreacpi: nfit: fix narrowing conversion in acpi_nfit_ctl7.1 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, snapdragon 8 gen 1 mobile platform firmware +4 more +6 moreIncorrect Type Conversion or Cast in Multimedia Frameworks7.8 High
- red hat enterprise linux 10, enterprise linux 9 +1 moreKeylime: keylime registrar dos due to incompatible database entry handling4.3 Medium
- mattermost, mattermost mobile +1 moreMobile crash via improper validation of proto style in attachments6.5 Medium
- mattermost, mattermost server +1 moreWebApp crash via improper validation of proto style in attachments6.5 Medium
- linux, linux kernel +1 moreRevert "readahead: properly shorten readahead when falling back to do_page_cache_ra()"5.5 Medium
- contiki-ngUnaligned memory access in RPL option processing in Contiki-NG7.5 High
- google androidIn writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of...7.8 High
- openplc v3, openplcproject openplc v3, openplc v3 firmware +2 moreMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP...7.5 High
- openplc v3, openplcproject openplc v3, openplc v3 firmware +2 moreMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP...7.5 High
- linux, linux kernel +1 morebpf: Fix wrong reg type conversion in release_reference()5.5 Medium
- fortinet fortios, fortiproxy +1 moreAn incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy...3.1 Low
- siemens tecnomatix plant simulation v2302, tecnomatix plant simulation v2404 +1 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302...7.3 High
- oneflowOneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter...5.3 Medium
- qualcomm qam8255p firmware, qam8650p firmware, qam8775p firmware +10 more +12 moreNULL Pointer Dereference in Graphics6.2 Medium
- google android, pixel +1 moreIn _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper...5.5 Medium
- snap snapchat lenscoreType Confusion in Snapchat Lenscore7.3 High
- offis dcmtk, debian linux +1 moreAn incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage...7.5 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +102 more +104 moreIncorrect Type Conversion or Cast in Multi-Mode Call Processor7.5 High
- mozilla firefoxPassing invalid data could have led to invalid wasm values being created, such as arbitrary...3.7 Low
- zephyrproject zephyripm: signed to unsigned conversion problem in esp32_ipm_send8.0 High
- siemens tecnomatix, tecnomatix plant simulation v2201, tecnomatix plant simulation v2302 +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201...7.8 High
- weaviateWeaviate denial of service vulnerability7.5 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +138 more +140 moreIncorrect Type Conversion or Cast in Core9.3 Critical
- qualcomm aqt1000 firmware, qca6390 firmware, qca6391 firmware +46 more +48 moreIncorrect Type Conversion or Cast in Trusted Execution Environment6.7 Medium
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6800 firmware +39 more +41 moreIncorrect Type Conversion or Cast in Video6.7 Medium
- qualcomm qca6595 firmware, qca6595au firmware, qca6696 firmware +7 more +9 moreIncorrect type conversion or cast in Audio6.7 Medium
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 moreIncorrect Type Conversion or Cast in Graphics8.4 High
- qualcomm qca6595 firmware, qca6595au firmware, qca6696 firmware +14 more +16 moreIncorrect type conversion or cast in Audio6.7 Medium
- wellintech kinghistorianAn integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of...8.1 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8076 firmware +282 more +284 moreIncorrect type conversion in WLAN8.4 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to...8.8 High
- qualcomm aqt1000 firmware, mdm9150 firmware, qca6391 firmware +30 more +32 moreIncorrect type casting in Display driver6.7 Medium
- google tensorflowInvalid char to bool conversion when printing a tensor in Tensorflow4.8 Medium
- google tensorflow`CHECK` fail in `BCast` overflow in Tensorflow4.8 Medium
- nagvisNagVis CoreLogonMultisite.php checkAuthCookie type conversion5.6 Medium
- schneider electric ecostruxure operator terminal expert, pro-face blue +1 moreA CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local...7.0 High
- amazon web services redshift java database connectivity drivercom.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution8.1 High
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 High
- qualcomm, inc. snapdragon auto, qualcomm qca6574au firmware, qca6696 firmware +7 more +9 moreMemory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon...8.4 High
- Show moreLoading…