Fallos del tipo CWE-843

684 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2023-28729HIGHA type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution EPSS 0.2%CVE-2023-46705MEDIUMArkruntime has a type confusion vulnerabilityEPSS 0.2%CVE-2023-41075HIGHA type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPaEPSS 0.2%CVE-2025-7999HIGHAshlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-26496CRITICALAccess of Resource Using Incompatible Type ('Type Confusion') vulnerability in Salesforce Tableau Server, Tableau Desktop on Windows, Linux EPSS 0.2%CVE-2025-43236LOWA type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS VeEPSS 0.2%CVE-2025-8002HIGHAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-8000HIGHAshlar-Vellum Cobalt LI File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-7995HIGHAshlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-8005HIGHAshlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution VulnerabilityEPSS 0.2%CVE-2026-28822MEDIUMA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, mEPSS 0.2%CVE-2026-59152MEDIUMArbitrary server-side file read in LangSmith SDK TracingMiddlewareEPSS 0.2%CVE-2023-3022MEDIUMA flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6_rule_lookup, sometimes holding rt6EPSS 0.2%CVE-2026-17948HIGHType Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to exEPSS 0.2%CVE-2026-21505MEDIUMiccDEV has Undefined Behavior (UB) - Invalid Enum ValueEPSS 0.2%CVE-2026-80161HIGHAcrobat Reader | Access of Resource Using Incompatible Type ('Type Confusion') (CWE-843)EPSS 0.2%CVE-2021-29519LOWCHECK-fail in SparseCross due to type confusionEPSS 0.2%CVE-2026-12390HIGHAccess of resource using incompatible type ('type confusion') in AzeoTech DAQFactoryEPSS 0.2%CVE-2026-21493MEDIUMiccDEV has Type Confusion during XML Curve SerializationEPSS 0.2%CVE-2026-72844MEDIUMLean 4 Kernel Type Checking Bypass via Mismatched Structure ProjectionsEPSS 0.2%