CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, firefox esr, thunderbird +2 moreType Confusion in Async Generators in Javascript Engine7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreSecure Boot Security Feature Bypass Vulnerability8.0 High
- openatom openharmonyArkcompiler Ets Runtime has a type confusion vulnerability3.3 Low
- openatom openharmonyArkcompiler Ets Runtime has a type confusion vulnerability3.3 Low
- google android, mediatek mt6768, mt6779 +19 more +21 moreIn venc, there is a possible out of bounds write due to type confusion. This could lead to local...9.8 Critical
- google chromeType confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform...8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform...8.8 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT Type Confusion8.5 High
- google pixel, android +1 moreIn gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected...7.4 High
- google android, pixel +1 moreIn lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to...7.8 High
- google androidIn handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion...7.8 High
- snap snapchat lenscoreType Confusion in Snapchat Lenscore7.3 High
- fuji electric monitouch v-sftFuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')8.5 High
- google chrome, fedoraproject fedora, google chromium v8 +2 morechromium - security update9.6 Critical
- google chrome, fedoraproject fedora +1 moreType Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to...8.1 High
- google chrome, fedoraproject fedora, google chromium v8 +2 moreType Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute...9.6 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Cloud Files Mini Filter Driver Information Disclosure Vulnerability5.5 Medium
- siemens simcenter femap, ps\/iges parasolid translator, ps iges parasolid translator component +2 moreA vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V27...7.3 High
- siemens simcenter femap, ps\/iges parasolid translator, ps iges parasolid translator component +2 moreA vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V27...7.3 High
- siemens simcenter femap, ps\/iges parasolid translator, ps iges parasolid translator component +2 moreA vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V27...7.3 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability7.8 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability7.0 High
- ashlar cobaltAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- pdf-xchange editor, pdf-tools +1 morePDF-XChange Editor addScript Type Confusion Remote Code Execution Vulnerability7.8 High
- kofax power pdfKofax Power PDF response Type Confusion Remote Code Execution Vulnerability7.8 High
- marudor libxmljs2libxmljs2 namespaces type confusion RCE8.1 High
- libxmljs project libxmljslibxmljs2 attrs type confusion RCE8.1 High
- libxmljs project libxmljslibxmljs namespaces type confusion RCE8.1 High
- libxmljs project libxmljslibxmljs attrs type confusion RCE8.1 High
- foxit reader, foxitsoftware foxit reader, foxit pdf editor +1 more +3 moreA type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997...8.8 High
- No product listedmarshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause...6.5 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to...8.8 High
- xen, fedoraproject fedora +1 morex86 HVM hypercalls may trigger Xen bug check6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability7.3 High
- 3ds edrawingsOut-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 20247.8 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability7.8 High
- bytecodealliance wasmtimeWasmtime vulnerable to panic when using a dropped extenref-typed element segment3.3 Low
- openatom openharmonyArkui has a type confusion vulnerability3.3 Low
- google androidIn TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used...7.8 High
- google chrome, fedoraproject fedora +1 moreType Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker...7.7 High
- dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 moreMultiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 20247.8 High
eyrecrates.ioeyre: Parts of Report are dropped as the wrong type during downcast7.5 High- openatom openharmonyArkui has a type confusion vulnerability2.9 Low
- google androidIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This...8.4 High
- Show moreLoading…