CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.9 and...7.5 High
- free5gcfree5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)7.5 High
- @babel plugin-transform-modules-systemjs, babel +1 moreImproper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjs8.2 High
- linux, linux kernel +1 morebonding: fix type confusion in bond_setup_by_slave()7.8 High
- google chromeType Confusion in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeType Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to...8.8 High
- google chromeType Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a...8.3 High
- qtType confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash8.7 High
- linux, linux kernel +1 moreBluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()7.1 High
- muttIn mutt before 2.3.2, the imap_auth_gss security level is mishandled.3.7 Low
- mediatek mt2718 firmware, mt6899 firmware, mt6985 firmware +30 more +32 moreIn slbc, there is a possible out of bounds write due to type confusion. This could lead to local...6.7 Medium
- linux, linux kernel, red hat enterprise linux 10 +19 more +21 moreipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()9.8 Critical
- linux, linux kernel, red hat nvidia for rhel 10 +26 more +28 moreip6_tunnel: clear skb2->cb[] in ip4ip6_err()9.8 Critical
- google chromeType Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to...8.8 High
astral-tokio-tarcrates.ioastral-tokio-tar is Vulnerable to PAX Header Desynchronization6.6 Medium- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated document6.5 Medium
- linux, linux kernel +1 moreteam: fix header_ops type confusion with non-Ethernet ports7.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...8.8 High
- google chromeType Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...8.8 High
- google chromeType Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to...8.8 High
- adobe framemakerAdobe Framemaker | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- openstack keystoneOpenStack Keystone: LDAP identity backend does not convert enabled attribute to boolean7.7 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows COM Server Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows OLE Elevation of Privilege Vulnerability7.8 High
- No product listedAn issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in...9.8 Critical
- jqlang jqjq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure6.1 Medium
- samsung escargotAccess of resource using incompatible type ('type confusion') vulnerability in Samsung Open...6.9 Medium
- samsung escargotDeserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script...6.2 Medium
- labcenter proteusLabcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability7.8 High
- google chromeType Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute...8.8 High
- go toolchain cmd/compile, golang go +1 moreMiscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile7.1 High
- academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreOpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)7.1 High
- bulwarkmail webmailRoundcube Webmail: Incorrect password comparison in the password plugin4.2 Medium
- apple macosA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS...3.3 Low
- free5gcFree5GC aper type confusion6.3 Medium
- parse-community parse-serverParse Server: LiveQuery protected-field guard bypass via array-like logical operator value5.3 Medium
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +10 more +12 moreHandlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial8.1 High
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +12 more +14 moreHandlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block8.1 High
- handlebars-lang handlebars.js, handlebarsjs handlebars, red hat cluster observability operator 1.5.0 +12 more +14 moreHandlebars.js has JavaScript Injection via AST Type Confusion9.8 Critical
- nodejs node, node.js, red hat enterprise linux 10 +7 more +9 moreA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received...7.5 High
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26...6.2 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation in the JavaScript Engine: JIT component9.8 Critical
- qwikQwik has array method pollution in FormData processing, allowing type confusion and DoS7.5 High
- google chromeType Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to...8.8 High
- alexcrichton tar-rstar-rs incorrectly ignores PAX size headers if header size is nonzero5.1 Medium
- htslibHTSlib CRAM decoder vulnerable to buffer overflow8.8 High
- canva affinityA type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially...7.8 High
- Show moreLoading…