Fallos del tipo CWE-843

684 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2024-49196HIGHAn issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service.EPSS 0.4%CVE-2023-38073HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.4%CVE-2026-50381MEDIUMComposite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-94083CRITICALSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even thEPSS 0.4%CVE-2025-22153HIGHtry/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreterEPSS 0.4%CVE-2024-38207MEDIUMMicrosoft Edge (HTML-based) Memory Corruption VulnerabilityEPSS 0.4%CVE-2023-38091HIGHKofax Power PDF response Type Confusion Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-33055MEDIUMtar-rs incorrectly ignores PAX size headers if header size is nonzeroEPSS 0.4%CVE-2026-69308MEDIUMMicrosoft Standard XPS Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44108HIGHType confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.EPSS 0.4%CVE-2026-44325HIGHfree5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)EPSS 0.4%CVE-2026-10962HIGHType Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.4%CVE-2026-10936HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2026-10935HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2024-32057HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32063HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32062HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2025-41738HIGHCODESYS Control - Invalid type usage in visualizationEPSS 0.4%CVE-2022-29209MEDIUMType confusion leading to `CHECK`-failure based denial of service in TensorFlowEPSS 0.4%CVE-2026-76047HIGHType confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a cEPSS 0.4%