CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 moreX.400 address type confusion in X.509 GeneralName7.4 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8168, mt8183, mt8321, mt8365, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791t, mt8797 +1 moreIn ion, there is a possible out of bounds read due to type confusion. This could lead to local...6.7 Medium
- gitlabIn Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could...6.3 Medium
- google chromeType Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote...8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreatm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause...5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a...5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- qualcomm aqt1000 firmware, mdm9150 firmware, qca6391 firmware +43 more +45 moreIncorrect Type Conversion in Video driver6.7 Medium
- google androidIn pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out...7.8 High
- apple ios, ipados, macos +3 more +5 moreA type confusion issue was addressed with improved state handling. This issue is fixed in Safari...8.8 High
- apple macosA type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey...7.8 High
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...8.8 High
- linux kernelAn incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux...4.6 Medium
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...8.8 High
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS...8.8 High
- apple macosA type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura...7.8 High
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to...8.8 High
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type...6.5 Medium
- microsoft windows com+ event system service, windows 10 version 1507, windows 10 version 1607 +33 more +35 moreWindows COM+ Event System Service Elevation of Privilege Vulnerability7.8 High
- google chromeType confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to...8.8 High
- mz automation libiec61850MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')8.6 High
- apple ipados, macos, tvos +2 more +4 moreA type confusion issue was addressed with improved state handling. This issue is fixed in watchOS...7.8 High
- google chromeType Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Defender Credential Guard Security Feature Bypass Vulnerability6.0 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8532, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn mailbox, there is a possible out of bounds write due to type confusion. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8532, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn mailbox, there is a possible out of bounds write due to type confusion. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8532, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn mailbox, there is a possible out of bounds write due to type confusion. This could lead to...6.7 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Type Confusion vulnerability could lead to Arbitrary code execution7.8 High
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to...8.8 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in...7.8 High
- google chrome, fedoraproject extra packages for enterprise linux, fedora +2 moreType confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to...8.8 High
- bandisoft ark libraryBandisoft ARK Library buffer overflow vulnerability7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets...7.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to...6.5 Medium
- delta electronics diascreenDelta Electronics DIAScreen - Type Confusion, Out-of-bounds Write7.8 High
- google tensorflowType confusion leading to `CHECK`-failure based denial of service in TensorFlow5.5 Medium
- nokogiri, apple macos +1 moreImproper Handling of Unexpected Data Type in Nokogiri8.2 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash...7.5 High
- eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 moreIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...5.3 Medium
- google chromeType confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain...8.8 High
- google chrome, chromium v8 +1 moreType confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to...8.8 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreLoose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat7.5 High
- google firebase php-jwtFirebase PHP-JWT key/algorithm type confusion9.1 Critical
- impresscmsType Confusion in ImpressCMS9.8 Critical
- google chrome, chromium v8 +1 morechromium - security update8.8 High
- Show moreLoading…