CWE-843: Type Confusion
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
Also known as Access of Resource Using Incompatible Type, Object Type Confusion.
A kind of CWE-704 Incorrect Type Conversion or Cast.
From the CWE List. © The MITRE Corporation.
Newest
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated...7.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- eclipse foundation threadxAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at...8.5 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 10.0 extended update support +14 more +16 moreLibsoup: libsoup: heap buffer overflow from websocket pong signal type confusion8.6 High
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine component6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript: WebAssembly component7.1 High
- zephyrproject zephyrWild pointer dereference in Zephyr BSD sockets when a TCP listening socket reports an asynchronous error6.5 Medium
- beaugunderson ip-addressip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range6.3 Medium
libdbi-perlDebian,perl-dbiAlpaquita,perl-DBI-debuginfoRed Hat +1 more +3 moreDBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv6.2 Mediumlibdbi-perlDebian,perl-dbiAlpaquita +1 moreDBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName7.5 High- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging...8.8 High
- google chromeType confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- google chromechromedriver-154.0.8037.57-1.1 on GA media8.8 High
- google chromeType confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to...8.8 High
- muety wakapiIn Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended...7.4 High
- aws pgcollectionType confusion in AWS pgcollection allows remote code execution8.7 High
libicalAzure Linux,libical3Debian +1 morelibical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When...6.2 Mediumlibxs-parse-keyword-perlDebian,perl-XS-Parse-KeywordMageia +1 moreXS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference7.5 High- rti connext professionalOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Ov…6.8 Medium
- rti connext professionalOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Ov…6.8 Medium
- fluent fluent-bitFluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler9.2 Critical
- oisf suricataSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup...9.4 Critical
- sveltejs devaluedevalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers7.5 High
- google chromeType confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging...8.8 High
- google chromeType confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...8.8 High
- google chromeType confusion in CacheStorage in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...8.8 High
- google chromeType confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...8.8 High
- google chromeType confusion in Compositing in Google Chrome prior to 153.0.8010.47 allowed a remote attacker...8.8 High
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26...5.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27,...7.5 High
- apple ipados, macos, safari +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and...5.5 Medium
- No product listedAn issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit...9.8 Critical
- zephyrproject zephyrType confusion in Zephyr HL78xx GNSS NMEA driver causes wild-pointer write from GNSS input5.3 Medium
- google chromeType confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...9.6 Critical
- google chromeType confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read...4.3 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 moreAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +12 more +14 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 +8 more +10 moreMicrosoft Office PowerPoint Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Performance Monitor Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft Standard XPS Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreWindows DHCP Server Denial of Service Vulnerability7.5 High
- Show moreLoading…