Fallos del tipo CWE-704

94 resultados

Conversão de tipo ou casting incorreto

Ocorre quando o código converte (faz cast de) um valor para um tipo de dado incompatível ou incorreto, sem validação adequada. Isso causa comportamento imprevisto: acesso a memória inválida, corrupção de dados, ou execução de código não autorizado, porque o programa interpreta bytes de forma errada.

Ejemplo

Um aplicativo recebe um objeto JSON como string, faz casting direto para um tipo de estrutura interna sem verificar se os campos existem ou têm o tipo esperado. Um atacante envia dados malformados, e a conversão permite ler ou escrever em áreas de memória sensíveis.

Cómo mitigar

Sempre valide dados antes de fazer casting: verifique o tipo real em tempo de execução (tipo dinâmico), use schemas ou validadores (JSON Schema, Protobuf), e prefira conversões seguras com tratamento de erro em vez de casts diretos. Em linguagens com tipagem forte, deixe o compilador fazer o trabalho.

CVE-2021-3578—A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arEPSS 1.0%CVE-2024-39590HIGHMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3EPSS 1.0%CVE-2024-39589HIGHMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3EPSS 1.0%CVE-2010-20115CRITICALVermillion FTP <= 1.31 Daemon PORT Command Memory CorruptionEPSS 0.9%CVE-2025-41648CRITICALPilz: Authentication Bypass in IndustrialPI WebstatusEPSS 0.8%CVE-2023-25737HIGHAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affectEPSS 0.7%CVE-2021-39989HIGHThe HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneEPSS 0.7%CVE-2026-59871MEDIUMnode-tar: Process crash via PAX numeric path type confusionEPSS 0.6%CVE-2022-1642—A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JEPSS 0.6%CVE-2026-55076HIGHCoder's OIDC email_verified type coercion bypass enables account takeover via unverified email linkingEPSS 0.6%CVE-2025-51678HIGHAn issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.EPSS 0.6%CVE-2024-47181HIGHUnaligned memory access in RPL option processing in Contiki-NGEPSS 0.6%CVE-2025-40541CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-12781MEDIUMbase64.b64decode() always accepts "+/" characters, despite setting altcharsEPSS 0.6%CVE-2025-21088MEDIUMWebApp crash via improper validation of proto style in attachmentsEPSS 0.6%CVE-2025-20072MEDIUMMobile crash via improper validation of proto style in attachmentsEPSS 0.5%CVE-2024-5436HIGHType Confusion in Snapchat LenscoreEPSS 0.5%CVE-2020-11725HIGHsnd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*EPSS 0.5%CVE-2025-62494HIGHType confusion in string addition in QuickJSEPSS 0.5%CVE-2022-41890MEDIUM`CHECK` fail in `BCast` overflow in TensorflowEPSS 0.5%