CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, safari +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 15.1, tvOS 15.1, iOS 15 and iPadOS 15, macOS Monterey 12.0.1, watchOS 8.1. Processing maliciously craf…8.8 High
- apple ipados, macos, safari +6 more +8 moreModerate: webkit2gtk3 security, bug fix, and enhancement update7.8 High
- apple ios, ipados, and macos, ipados, macos +3 more +5 moreApple iOS, iPadOS, and macOS Type Confusion Vulnerability7.8 High
- apple ipados, macos, iphone os +1 more +3 moreA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may b…7.8 High
- apple ipados, tvos, watchos +3 more +5 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web conten…8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute...8.8 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Pro DC getAnnot Type Confusion Information Disclosure Vulnerability3.3 Low
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability3.3 Low
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to...8.8 High
- apple ios, macos, safari +3 more +5 moreA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14...8.8 High
- google chrome, chromium v8 +1 moreType Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to...8.8 High
- moddableIssue was discovered in the fxParserTree function in moddable, allows attackers to cause denial...7.5 High
- autodesk design reviewA Type Confusion vulnerability in Autodesk 2018, 2017, 2013, 2012, 2011 can occur when processing...7.8 High
- huawei emui, magic ui +1 moreThere is an Information Disclosure Vulnerability in Huawei Smartphone. Successful exploitation of...9.1 Critical
- debian linux, linux kernel +1 moreIn kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g.,...4.7 Medium
- ericnorris striptagsPassing in a non-string 'html' argument can lead to unsanitized output3.7 Low
- foxit phantompdf, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to...8.8 High
- opentext brava! desktop, brava\! +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- zephyrproject zephyrType Confusion in 802154 ACK Frames Handling5.9 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...5.5 Medium
- telegramTelegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type...5.5 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to...8.8 High
- google tensorflowType confusion during tensor casts lead to dereferencing null pointers2.5 Low
- google tensorflowCHECK-fail in SparseCross due to type confusion2.5 Low
- mercedes-benz headunit ntg6 mercedes-benz user experienceAn issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz...2.9 Low
- foxit reader, foxitsoftware phantompdf +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreType confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute...8.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- apple ipados, macos, tvos +7 more +9 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...8.8 High
- cgal computational geometry algorithms library, debian linux +1 moreA code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...10.0 Critical
- omron cx-one, cx-position, cx-protocol +1 more +3 moreOmron CX-One7.8 High
- google androidIn RT regmap driver, there is a possible memory corruption due to type confusion. This could lead...4.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreUsing the new logical assignment operators in a JavaScript switch statement could have caused a...8.8 High
- openldap, apple mac os x, macos +4 more +6 moreA flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the...7.5 High
- opendesign drawings software development kit, siemens comos, jt2go +1 more +3 moreAn issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer...7.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All Versions < V13.1.0), JT2Go (V 13.1.0),...8.8 High
- siemens jt2go, teamcenter visualization +1 moreA vulnerability has been identified in JT2Go (All Versions < V13.1.0), Teamcenter Visualization ...8.8 High
- deltaww cncsoft-bDelta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while...7.8 High
- eaton easysoft, easysoft software +1 moreFile parsing Type Confusion Remote code execution vulerability5.8 Medium
- foxit, foxitsoftware foxit reader +1 moreA type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF...8.8 High
- gallagher command centreType confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or...8.8 High
- apple ipados, macos, watchos +6 more +8 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...7.8 High
- google chromeInsufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote...8.8 High
- model project modelData races in model8.1 High
- linux kernel, redhat enterprise linux +1 moreA Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth...7.5 High
- Show moreLoading…