Weaknesses of type CWE-843

686 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2026-8570MEDIUMType Confusion in V8 in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to obtain potentially sensitive information from proEPSS 0.3%CVE-2024-30266LOWWasmtime vulnerable to panic when using a dropped extenref-typed element segmentEPSS 0.3%CVE-2025-12899MEDIUMnet: icmp: Out of bound memory readEPSS 0.3%CVE-2024-40788MEDIUMA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOSEPSS 0.3%CVE-2025-30310HIGHDreamweaver Desktop | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)EPSS 0.3%CVE-2025-48756LOWIn group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.gEPSS 0.3%CVE-2026-11463MEDIUMUSCiLab Cereal Shared Pointer type confusionEPSS 0.3%CVE-2026-35541MEDIUMAn issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Incorrect password comparison in the password plugin could lead to tyEPSS 0.3%CVE-2023-23454MEDIUMcbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds readEPSS 0.3%CVE-2026-11076HIGHType Confusion in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a craEPSS 0.3%CVE-2023-50433MEDIUMmarshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious EPSS 0.3%CVE-2026-7914HIGHType Confusion in Accessibility in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendereEPSS 0.3%CVE-2026-12298MEDIUMMemory safety bug fixed in Firefox 152EPSS 0.3%CVE-2026-12299MEDIUMJIT miscompilation in the DOM: Core & HTML componentEPSS 0.3%CVE-2026-79769HIGHNokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_argsEPSS 0.3%CVE-2026-16410CRITICALJIT miscompilation in the JavaScript Engine: JIT componentEPSS 0.3%CVE-2026-25204MEDIUMDeserialization of untrusted data vulnerability in Samsung Open Source Escargot Java Script allows denial of service condition via process aEPSS 0.3%CVE-2024-13047HIGHAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-27298HIGHAdobe Framemaker | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)EPSS 0.3%CVE-2026-80161HIGHAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)EPSS 0.3%