Weaknesses of type CWE-843

686 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2026-21505MEDIUMiccDEV has Undefined Behavior (UB) - Invalid Enum ValueEPSS 0.2%CVE-2021-29519LOWCHECK-fail in SparseCross due to type confusionEPSS 0.2%CVE-2026-12390HIGHAccess of resource using incompatible type ('type confusion') in AzeoTech DAQFactoryEPSS 0.2%CVE-2026-21493MEDIUMiccDEV has Type Confusion during XML Curve SerializationEPSS 0.2%CVE-2026-44728HIGHImproper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjsEPSS 0.2%CVE-2026-28822MEDIUMA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mEPSS 0.2%CVE-2025-8354HIGHRFA File Parsing Type Confusion VulnerabilityEPSS 0.2%CVE-2026-11785MEDIUM389-ds-base: 389-ds-base: partial stack address information leak via ber_printf type confusion in sso token handlerEPSS 0.2%CVE-2026-72844MEDIUMLean 4 Kernel Type Checking Bypass via Mismatched Structure ProjectionsEPSS 0.2%CVE-2026-77237HIGHMissing type validation in xQueueAddToSet in FreeRTOS-KernelEPSS 0.2%CVE-2026-57254HIGHFoxit PDF Editor/Reader Annotation Type Confusion VulnerabilityEPSS 0.2%CVE-2024-40676HIGHIn checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to aEPSS 0.2%CVE-2026-6047MEDIUMHeap buffer overflow in OOXML text box element importEPSS 0.2%CVE-2026-8358MEDIUMHeap buffer overflow in spreadsheet tracked-changes importEPSS 0.2%CVE-2026-39956MEDIUMjq: Missing runtime type checks for _strindices lead to crash and limited memory disclosureEPSS 0.2%CVE-2026-45702MEDIUMOP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panicEPSS 0.2%CVE-2023-0083MEDIUMThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.EPSS 0.2%CVE-2023-23443MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51428MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51427MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%