Fallos del tipo CWE-843

808 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2026-43862LOWIn mutt before 2.3.2, the imap_auth_gss security level is mishandled.EPSS 0.2%CVE-2023-0083MEDIUMThe ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.EPSS 0.2%CVE-2023-23443MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51428MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2026-79611MEDIUMVMX: VMentry failure with branch tracing and blocked statesEPSS 0.2%CVE-2023-51427MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51426MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2026-64693MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, EPSS 0.2%CVE-2026-84602MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS GoldEPSS 0.2%CVE-2025-25277MEDIUMarkcompiler_ets_runtime has a type confusion vulnerabilityEPSS 0.2%CVE-2023-31323HIGHType confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed argument to the External Global Memory InterconEPSS 0.2%CVE-2026-14119MEDIUMType Confusion in Bluetooth in Google Chrome on Windows prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain poEPSS 0.2%CVE-2026-45702MEDIUMOP-TEE has FF-A type confusion in SPMC tmem path that causes S-EL1 kernel panicEPSS 0.2%CVE-2026-119086HIGHMissing type validation in xQueueSelectFromSet in FreeRTOS-KernelEPSS 0.2%CVE-2026-20451MEDIUMIn slbc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actoEPSS 0.2%CVE-2026-6047MEDIUMHeap buffer overflow in OOXML text box element importEPSS 0.2%CVE-2024-21834LOWArkui has a type confusion vulnerabilityEPSS 0.2%CVE-2026-58305MEDIUMAccess of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. ThEPSS 0.2%CVE-2026-10022HIGHType Confusion in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to eEPSS 0.2%CVE-2026-112547MEDIUMA type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access senEPSS 0.1%