CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlight5.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability7.8 High
- owasp corerulesetcoreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not block multiple Content...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- siemens tecnomatix, tecnomatix plant simulation v2201, tecnomatix plant simulation v2302 +2 moreA vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201...7.8 High
- zephyrproject zephyrBT HCI host union variant confusion6.8 Medium
- zephyrproject zephyrHCI Connection Creation Dangling State Reference Re-use5.9 Medium
- huawei emui, harmonyos +1 moreUse After Free (UAF) vulnerability in the audio PCM driver module under special conditions....9.8 Critical
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8168, mt8195, mt8321, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791t, mt8797 +1 moreIn ion, there is a possible out of bounds read due to type confusion. This could lead to local...6.7 Medium
- google chrome, debian linux +1 moreType Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to...8.8 High
- apple ipados, macos, safari +4 more +6 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5 and...7.8 High
- linux kernelA flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently...5.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to...8.8 High
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible memory corruption due to type confusion. This could lead to local...4.4 Medium
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- open-xchange ox app suiteOX App Suite before backend 7.10.6-rev37 allows authenticated users to change the appointments of...4.3 Medium
- facebook hermesA type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could...9.8 Critical
- facebook hermesAn error in Hermes' algorithm for copying objects properties prior to commit...9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to...8.8 High
- google android, mediatek iot yocto, mediatek, inc. mt5696, mt5836, mt5838, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8195, mt8395, mt8781, mt8786, mt8789, mt8791, mt8797, mt9000, mt9023, mt9025, mt9618, mt9653, mt9687, mt9689, mt9902, mt9932, mt9952, mt9972, mt9982 +2 moreIn vcu, there is a possible memory corruption due to type confusion. This could lead to local...6.7 Medium
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h2 +12 more +14 moreWindows Bluetooth Driver Information Disclosure Vulnerability6.5 Medium
- riot-os riotRIOT-OS vulnerable to Packet Type Confusion during IPHC send9.8 Critical
- browser.360 chromeBuffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker to escalate...10.0 Critical
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- treasuredata fluent bitAn issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in...7.8 High
- lexmark cslbl firmware, cslbn firmware, csnzj firmware +23 more +25 moreCertain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.9.8 Critical
- foxit pdf editor, pdf reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- debian linux, linux kernel, netapp 8300 firmware +13 more +15 moreIn the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the...7.0 High
- linux kernelA flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 High
- openatom openharmonyThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.4.0 Medium
- google chromeType confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who...6.3 Medium
- google chromeType confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to...8.8 High
- linux kernelA flaw was found in the Linux Kernel in RDS (Reliable Datagram Sockets) protocol. The...7.8 High
- google androidIn lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type...6.7 Medium
- linux kernelA flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness...3.3 Low
- feathers-sequalize sequelize.js, sequelizejs sequelize +1 moreSequalize - Unsafe fall-through in getWhereConditions9.9 Critical
- apple ipados, macos, safari +3 more +5 moreA type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura...8.8 High
- google chromeType confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who...8.8 High
- google chromeType confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to...8.8 High
- Show moreLoading…