CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. There is...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreType confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to...8.8 High
- apple ios, ipados, macos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...7.8 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreType confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to...8.8 High
- facebook hhvmmcrypt_get_block_size did not enforce that the provided "module" parameter was a string, leading...9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and...8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...8.8 High
- kde, kde konqueror, redhat enterprise linux +3 more +5 moreThe CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...8.8 High
- phplistphpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.010.20064 and earlier, 2019.010.20064 and earlier, 2017...9.8 Critical
- rockwell automation arena simulation software, rockwellautomation arena +1 moreA maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena...7.8 High
- usebbpanel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead...9.8 Critical
- amd atidxx64An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20...9.0 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreIncorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a...8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...8.8 High
- apple ios, macos, tvos +3 more +5 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...7.1 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +6 more +8 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...8.8 High
- luajit, moonjit project moonjit +1 moreIn LuaJIT through 2.0.5, as used in Moonjit before 2.1.2 and other products, debug.getinfo has a...9.1 Critical
- failure project failureType confusion if __private_get_type_id__ is overriden9.8 Critical
- failure project failureRust Failure Crate Vulnerable to Type confusion9.8 Critical
- linux kernel, canonical ubuntu linux, ubuntu shiftfs in the linux kernel +2 moreType confusion in shiftfs7.1 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017...9.8 Critical
- wordpress, debian linux +1 moreWordPress before 5.2.4 does not properly consider type confusion during validation of the referer...8.8 High
- gonitro nitropdfAn exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of...7.5 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit readerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- mozilla firefox, firefox esr +1 moreA type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash....6.5 Medium
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- adobe photoshop ccAdobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion...9.8 Critical
- google androidIn CompilationJob::FinalizeJob of compiler.cc, there is a possible remote code execution due to...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions , 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...8.8 High
- yourlsAccess of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls9.8 Critical
- laquisscada scada, lcds laquis scada +1 moreA type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially...7.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...6.5 Medium
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects Nokogiri5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA type confusion vulnerability can occur when manipulating JavaScript objects due to issues in...8.8 High
- mozilla thunderbirdA flaw in Thunderbird's implementation of iCal causes a type confusion in...7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer +1 more +3 moreScripting Engine Memory Corruption Vulnerability7.5 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +1 more +3 moreScripting Engine Memory Corruption Vulnerability4.3 Medium
- androidIn HAliasAnalyzer.Query of hydrogen-alias-analysis.h, there is possible memory corruption due to...9.8 Critical
- panasonic fpwin pro, control fpwin pro +1 morePanasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded...7.8 High
- Show moreLoading…