Weaknesses of type CWE-843

686 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2023-38073HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.4%CVE-2026-50381MEDIUMComposite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityEPSS 0.4%CVE-2025-22153HIGHtry/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreterEPSS 0.4%CVE-2026-18701HIGHType Confusion in MongoDB Query Subsystem Leads to Denial of ServiceEPSS 0.4%CVE-2024-38207MEDIUMMicrosoft Edge (HTML-based) Memory Corruption VulnerabilityEPSS 0.4%CVE-2026-7927HIGHType Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via aEPSS 0.4%CVE-2023-38091HIGHKofax Power PDF response Type Confusion Remote Code Execution VulnerabilityEPSS 0.4%CVE-2023-44108HIGHType confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.EPSS 0.4%CVE-2026-10935HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2026-10936HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2026-10962HIGHType Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.4%CVE-2024-32062HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32063HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32057HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2022-29209MEDIUMType confusion leading to `CHECK`-failure based denial of service in TensorFlowEPSS 0.4%CVE-2025-41738HIGHCODESYS Control - Invalid type usage in visualizationEPSS 0.4%CVE-2025-59717MEDIUMIn the @digitalocean/do-markdownit package through 1.16.1 (in npm), the callout and fence_environment plugins perform .includes substring maEPSS 0.4%CVE-2026-80183HIGHIn OpenStack Keystone before 29.0.3, any authenticated user holding role:reader on any project can list every project-scoped role assignmentEPSS 0.4%CVE-2026-10955HIGHType Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds meEPSS 0.4%CVE-2024-11507HIGHIrfanView DXF File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.4%