CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- apple macos, mac os x +1 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...7.8 High
- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability of accessing resources using an incompatible type (type confusion) in...7.5 High
- google chromeType confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker...8.8 High
- envoyproxy envoyX.509 subjectAltName matching bypass in Envoy7.4 High
- f5 njsnjs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a...9.8 Critical
- siemens simcenter femap v2020.2, simcenter femap v2021.1, simcenter femap +2 moreA vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap...7.8 High
github.com/docker/distributionGoOCI Manifest Type Confusion Issue3.0 Low- google chromeType confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to...8.8 High
- google tensorflow`CHECK`-failures in binary ops in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in Tensorflow6.5 Medium
- google tensorflowType confusion leading to segfault in Tensorflow6.5 Medium
- facebook hermesAccess of Resource Using Incompatible Type in Hermes9.8 Critical
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to...8.8 High
- lua, fedoraproject fedora +1 moreLua 5.4.4 and 5.4.2 are affected by SEGV by type confusion in funcnamefromcode function in ldebug...5.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Vulnerability of accessing resources using an incompatible type (type confusion) in...5.5 Medium
- huawei harmonyosThe HwNearbyMain module has a Data Processing Errors vulnerability.Successful exploitation of...7.5 High
- facebook hermesA type confusion vulnerability could be triggered when resolving the "typeof" unary operator in...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
github.com/containerd/containerdGoAmbiguous OCI manifest parsing3.0 Lowgithub.com/opencontainers/image-specGoClarify `mediaType` handling3.0 Low- fedoraproject fedora, linuxfoundation open container initiative distribution specification, open container initiative image format specification +1 more +3 moreClarify Content-Type handling in OCI spec3.0 Low
- softing uatoolkit embedded, smartlink hw-dp +1 moreAn issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote...7.5 High
- softing opc, datafeed opc suite, secure integration server +1 more +3 moreAn issue was discovered in Softing Industrial Automation OPC UA C++ SDK before 5.66. Remote...7.5 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- siemens capital embedded ar classic 431-422, capital embedded ar classic r20-11, pluscontrol 1st gen +12 more +14 moreA vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC)...6.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to...8.8 High
- bootstrap-table bootstrap tableCross-site Scripting (XSS)3.1 Low
- json-ptr project json-ptrPrototype Pollution5.6 Medium
- janl jsonpointerPrototype Pollution5.6 Medium
- dotty project dottyPrototype Pollution5.6 Medium
- manuelstofer json-pointerPrototype Pollution5.6 Medium
- apple ipados, safari, tvos +4 more +6 moreA type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14...8.8 High
- teddy project teddyCross-site Scripting (XSS)5.4 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution Vulnerability7.8 High
- google chrome, fedoraproject fedora +1 moreType confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker...8.8 High
- client jointjsPrototype Pollution5.6 Medium
- adonisjs edgeCross-site Scripting (XSS)5.4 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreWrong type for `Linker`-define functions when used across two `Engine`s6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreOut-of-bounds read/write and invalid free with `externref`s and GC safepoints in Wasmtime6.3 Medium
- bytecodealliance wasmtime, fedoraproject fedora +1 moreUse after free passing `externref`s to Wasm in Wasmtime6.3 Medium
- microsoft office, office 2013 service pack 1, office 2016 +1 more +3 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- set-value project set-value, oracle communications cloud native core policy +1 morePrototype Pollution7.3 High
- apple macosA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...9.8 Critical
- hackerone mpathPrototype Pollution5.6 Medium
- immer project immerPrototype Pollution5.6 Medium
- mariocasciaro object-path, debian linux +1 morePrototype Pollution5.6 Medium
- Show moreLoading…