Fallos del tipo CWE-843

808 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2026-18458MEDIUMOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.EPSS 0.1%CVE-2026-11389MEDIUMOut-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.EPSS 0.1%CVE-2026-47504HIGHNVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible EPSS 0.1%CVE-2023-31322HIGHType confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Serviceability trusted EPSS 0.1%CVE-2024-31071LOWArkcompiler Ets Runtime has a type confusion vulnerabilityEPSS 0.1%CVE-2024-36278LOWArkcompiler Ets Runtime has a type confusion vulnerabilityEPSS 0.1%CVE-2025-21082LOWarkui_ace_engine has a type confusion vulnerabilityEPSS 0.1%CVE-2025-20063LOWarkui_ace_engine has a type confusion vulnerabilityEPSS 0.1%CVE-2026-47572HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause type confusion. A successful EPSS 0.1%CVE-2023-49602LOWArkui has a type confusion vulnerabilityEPSS 0.1%CVE-2026-47569HIGHNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a type confusion via a handleEPSS 0.1%CVE-2026-20575MEDIUMIn afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hEPSS 0.1%CVE-2026-31502HIGHteam: fix header_ops type confusion with non-Ethernet portsEPSS 0.1%CVE-2025-27536LOWarkcompiler_ets_runtime has a type confusion vulnerabilityEPSS 0.1%CVE-2026-47583HIGHNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker could cause type confusion. A successfEPSS 0.1%CVE-2026-44728HIGHImproper Control of Generation of Code when compiling specifically crafted malicious code with @babel/plugin-transform-modules-systemjsEPSS 0.1%CVE-2026-20571MEDIUMIn afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hEPSS 0.1%CVE-2022-20461HIGHIn pinReplyNative of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible out of bounds read due to type confusion. This EPSS 0.1%CVE-2026-20574MEDIUMIn afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hEPSS 0.1%CVE-2026-124030MEDIUMGPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-ReplaceEPSS 0.1%