Weaknesses of type CWE-843

808 results

Confusão de Tipos

Ocorre quando o programa trata uma variável ou objeto como se fosse de um tipo diferente do seu tipo real, levando a comportamentos impredizíveis. O atacante explora essa interpretação errada para contornar validações, corromper memória ou executar código arbitrário.

Example

Um aplicativo recebe um valor que valida como inteiro, mas a função que o processa o interpreta como um ponteiro de memória. O código tenta acessar e modificar dados no endereço apontado, causando corrupção ou exposição de informações sensíveis.

How to mitigate

Implemente validação rigorosa e conversão explícita de tipos antes de usar qualquer dado externo. Use linguagens com verificação forte de tipos em tempo de compilação e, quando necessário, valide tanto o tipo quanto o intervalo de valores esperados. Testes de fuzzing e análise estática ajudam a detectar confusões de tipo.

CVE-2026-124031MEDIUMGPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4EPSS 0.1%CVE-2026-19575HIGHType confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel codeEPSS 0.1%CVE-2022-25721MEDIUMIncorrect Type Conversion in Video driverEPSS 0.1%CVE-2026-109282LOWImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML EncodersEPSS 0.1%CVE-2026-20587MEDIUMIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious EPSS 0.1%CVE-2024-32892HIGHIn handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of prEPSS 0.1%CVE-2026-102757HIGHAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,EPSS 0.1%CVE-2025-64314CRITICALPermission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentEPSS 0.1%CVE-2023-20616MEDIUMIn ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System executionEPSS 0.1%CVE-2026-0314MEDIUMGlobalProtect App: Local Denial of Service (DoS) on WindowsEPSS 0.1%CVE-2025-58310HIGHPermission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confEPSS 0.1%CVE-2026-44640MEDIUMNanoMQ: QUIC Dialer Close Type ConfusionEPSS 0.1%CVE-2023-32835MEDIUMIn keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2023-32818MEDIUMIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2023-20673MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2023-21056MEDIUMIn lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalatiEPSS 0.1%CVE-2025-54649MEDIUMVulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerabilityEPSS 0.1%CVE-2024-20012MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-20747MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privilEPSS 0.1%CVE-2024-27236HIGHIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilegEPSS 0.1%