CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- google chrome, cefsharp, debian linux +6 more +8 moreInappropriate implementation in V88.8 High
- apple safari, debian linux, webkit webkitgtk\+ +2 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in Safari...8.8 High
- gitlabAn issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2...4.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to...8.8 High
- google androidIn SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to...6.7 Medium
- facebook hermesAccess of Resource Using Incompatible Type in Facebook Hermes9.8 Critical
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ics-cert advantech webaccess hmi designer, advantech webaccess\/hmi designer +1 moreAdvantech WebAccess HMI Designer, Versions 2.1.9.31 and prior. Processing specially crafted...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreJIT optimizations involving the Javascript arguments object could confuse later optimizations....8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to...8.8 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method...5.3 Medium
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +14 more +16 moreA remote code execution vulnerability exists in Microsoft Windows that could allow remote code...8.8 High
- huawei mate 30, mate 30 firmware +1 moreHUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...5.5 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017...7.8 High
- google androidIn createWithSurfaceParent of Client.cpp, there is a possible out of bounds write due to type...7.8 High
- google androidIn FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to...9.8 Critical
- webroot endpoint agentsWebroot endpoint agents prior to version v9.0.28.48 allows remote attackers to trigger a type...9.1 Critical
- rgb-rust project rgb-rustOut of bounds access in rgb9.1 Critical
- microsoft chakracore, edge, internet explorer 11 +35 more +37 moreA remote code execution vulnerability exists in the way that Microsoft browsers access objects in...7.5 High
- apple icloud, icloud for windows, ios +9 more +11 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...8.8 High
- google chrome, debian linux, opensuse leap +2 moreType confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to...8.8 High
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- autodesk fbx software development kitA type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...8.8 High
- trianglemicroworks scada data gatewayTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122...9.8 Critical
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...8.8 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS)...9.8 Critical
- apple icloud, icloud for windows, ios +8 more +10 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...8.8 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software....9.8 Critical
- Show moreLoading…