CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- gpac GPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4 6.8 Medium
- gpac GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace 6.8 Medium
- signalwire freeswitch FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling 7.5 High
-
libcgi-pm-perlDebian,perl-CGIopenSUSE +1 more CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo No score - google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Type confusion in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute... 8.8 High
- google chrome Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to... 8.8 High
- google chrome Type confusion in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker... 8.8 High
- mediatek, inc. mediatek chipset In afe, there is a possible memory corruption due to use after free. This could lead to local... 6.7 Medium
- mediatek, inc. mediatek chipset In afe, there is a possible memory corruption due to use after free. This could lead to local... 6.7 Medium
- mediatek, inc. mediatek chipset In afe, there is a possible memory corruption due to use after free. This could lead to local... 6.7 Medium
- freertos freertos-kernel Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel 8.2 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Information Disclosure Vulnerability 7.4 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability 5.4 Medium
- mongodb laravel mongodb Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs 7.7 High
- google chrome Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote... 8.8 High
- google chrome Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker... 9.6 Critical
- google chrome Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to... 8.8 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 7.5 High
- microsoft edge (chromium-based), edge chromium +1 more Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 8.8 High
- the epics community epics base Access of resource using incompatible type ('type confusion') in EPICS Base 8.7 High
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript: WebAssembly component 8.1 High
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript Engine: JIT component 7.3 High
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved state management. This issue is fixed in... 8.8 High
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved checks. This issue is fixed in Safari 27.2,... 7.5 High
- apple ipados, macos, tvos +4 more +6 more A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26... 6.2 Medium
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved state handling. This issue is fixed in Safari... 4.3 Medium
- apple macos A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS... 5.5 Medium
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari... 8.8 High
- apple ipados, ios and ipados, iphone os +2 more A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and... 5.5 Medium
- 2k games sid meier's civilization vi, 2k sid meiers civilization vi +1 more 2K Games Sid Meier's Civilization VI Lua sandbox loadstring type confusion 5.3 Medium
- timescale pgvectorscale Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes 7.7 High
- 2k games civilization v, 2k sid meiers civilization v +1 more 2K Games Civilization V Lua Sandbox loadstring type confusion 5.3 Medium
- vyperlang vyper Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection 6.3 Medium
- google chrome Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 6.5 Medium
- google chrome Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- google chrome Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a... 8.8 High
- google chrome Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute... 8.8 High
- Show olderLoading…