Fallos del tipo CWE-704

104 resultados

Conversão de tipo ou casting incorreto

Ocorre quando o código converte (faz cast de) um valor para um tipo de dado incompatível ou incorreto, sem validação adequada. Isso causa comportamento imprevisto: acesso a memória inválida, corrupção de dados, ou execução de código não autorizado, porque o programa interpreta bytes de forma errada.

Ejemplo

Um aplicativo recebe um objeto JSON como string, faz casting direto para um tipo de estrutura interna sem verificar se os campos existem ou têm o tipo esperado. Um atacante envia dados malformados, e a conversão permite ler ou escrever em áreas de memória sensíveis.

Cómo mitigar

Sempre valide dados antes de fazer casting: verifique o tipo real em tempo de execução (tipo dinâmico), use schemas ou validadores (JSON Schema, Protobuf), e prefira conversões seguras com tratamento de erro em vez de casts diretos. Em linguagens com tipagem forte, deixe o compilador fazer o trabalho.

CVE-2026-40613HIGHCoturn: Misaligned Memory Access in coturn STUN Attribute Parser (Remote DoS on ARM64)EPSS 1.1%CVE-2022-3979MEDIUMNagVis CoreLogonMultisite.php checkAuthCookie type conversionEPSS 1.1%CVE-2021-3578—A flaw was found in mbsync before v1.3.6 and v1.4.2, where an unchecked pointer cast allows a malicious or compromised server to write an arEPSS 1.0%CVE-2024-39589HIGHMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3EPSS 1.0%CVE-2024-39590HIGHMultiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a3EPSS 1.0%CVE-2025-12781MEDIUMbase64.b64decode() always accepts "+/" characters, despite setting altcharsEPSS 0.9%CVE-2025-41648CRITICALPilz: Authentication Bypass in IndustrialPI WebstatusEPSS 0.8%CVE-2023-25737HIGHAn invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affectEPSS 0.7%CVE-2022-1642—A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JEPSS 0.7%CVE-2021-39989HIGHThe HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulneEPSS 0.7%CVE-2026-59871MEDIUMnode-tar: Process crash via PAX numeric path type confusionEPSS 0.6%CVE-2026-55076HIGHCoder's OIDC email_verified type coercion bypass enables account takeover via unverified email linkingEPSS 0.6%CVE-2025-51678HIGHAn issue was discovered in RISC-V PicoRV32 commit 87c89a. A mismatch in the PCPI INSN and memory address can lead to unexpected behavior.EPSS 0.6%CVE-2025-40541CRITICALSolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-21088MEDIUMWebApp crash via improper validation of proto style in attachmentsEPSS 0.6%CVE-2024-47181HIGHUnaligned memory access in RPL option processing in Contiki-NGEPSS 0.6%CVE-2026-18675MEDIUMKong Mesh: control plane denial of service via a malformed dataplane token with a non-string JWT kidEPSS 0.6%CVE-2025-20072MEDIUMMobile crash via improper validation of proto style in attachmentsEPSS 0.5%CVE-2025-54429MEDIUMPolkadot Frontier's constructing smart contract can bypass precompile address boundingEPSS 0.5%CVE-2025-62494HIGHType confusion in string addition in QuickJSEPSS 0.5%