Fallos del tipo CWE-843

684 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2025-27536LOWarkcompiler_ets_runtime has a type confusion vulnerabilityEPSS 0.1%CVE-2026-6047MEDIUMHeap buffer overflow in OOXML text box element importEPSS 0.1%CVE-2022-20461HIGHIn pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This EPSS 0.1%CVE-2022-25721MEDIUMIncorrect Type Conversion in Video driverEPSS 0.1%CVE-2026-20508MEDIUMIn Power HAL, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicEPSS 0.1%CVE-2024-32892HIGHIn handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of prEPSS 0.1%CVE-2023-20616MEDIUMIn ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System executionEPSS 0.1%CVE-2026-44640MEDIUMNanoMQ: QUIC Dialer Close Type ConfusionEPSS 0.1%CVE-2025-64314CRITICALPermission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentEPSS 0.1%CVE-2023-20673MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2023-21056MEDIUMIn lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalatiEPSS 0.1%CVE-2024-20012MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2025-58310HIGHPermission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confEPSS 0.1%CVE-2023-20747MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privilEPSS 0.1%CVE-2023-32835MEDIUMIn keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2024-27236HIGHIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilegEPSS 0.1%CVE-2023-32818MEDIUMIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2024-20010MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-32834MEDIUMIn secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2024-20106MEDIUMIn m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System EPSS 0.1%