Weaknesses of type CWE-843

808 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2023-0083MEDIUMThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.EPSS 0.2%CVE-2026-43862LOWIn mutt before 2.3.2, the imap_auth_gss security level is mishandled.EPSS 0.2%CVE-2023-51427MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51426MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2026-79611MEDIUMVMX: VMentry failure with branch tracing and blocked statesEPSS 0.2%CVE-2023-51428MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-23443MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2026-64693MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, EPSS 0.2%CVE-2026-84602MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS GoldEPSS 0.2%CVE-2025-25277MEDIUMarkcompiler_ets_runtime has a type confusion vulnerabilityEPSS 0.2%CVE-2026-14119MEDIUMType Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain poEPSS 0.2%CVE-2023-31323HIGHType confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory InterconEPSS 0.2%CVE-2026-119086HIGHMissing type validation in xQueueSelectFromSet in FreeRTOS-KernelEPSS 0.2%CVE-2026-45702MEDIUMOP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panicEPSS 0.2%CVE-2026-20451MEDIUMIn slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actoEPSS 0.2%CVE-2026-6047MEDIUMHeap buffer overflow in OOXML text box element importEPSS 0.2%CVE-2024-21834LOWArkui has a type confusion vulnerabilityEPSS 0.2%CVE-2026-58305MEDIUMAccess of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. ThEPSS 0.2%CVE-2026-10022HIGHType Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to eEPSS 0.2%CVE-2026-112547MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access senEPSS 0.1%