Fallos del tipo CWE-843

808 resultados

Confusão de Tipos

Ocorre quando o código trata um objeto como se fosse de um tipo diferente do seu tipo real, contornando verificações de tipo ou explorando conversões implícitas. Isso permite ao atacante executar operações não autorizadas, acessar memória indevida ou ganhar controle de execução.

Ejemplo

Um navegador interpreta um objeto JavaScript como um array e acessa propriedades além dos limites esperados; ou um objeto C é reinterpretado como um tipo com layout de memória diferente, lendo dados sensíveis adjacentes ou escrevendo em endereços não autorizados.

Cómo mitigar

Validar rigorosamente tipos antes de operações críticas (type checking explícito em runtime), evitar casts inseguros, usar linguagens com type safety forte, e aplicar análise estática para detectar conversões perigosas. Em C/C++, preferir safe casts e checked access patterns.

CVE-2026-124031MEDIUMGPAC through 26.07.0 Type Confusion via drawable_get_aspect_2d_mpeg4EPSS 0.1%CVE-2026-19575HIGHType confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel codeEPSS 0.1%CVE-2022-25721MEDIUMIncorrect Type Conversion in Video driverEPSS 0.1%CVE-2026-109282LOWImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML EncodersEPSS 0.1%CVE-2026-20587MEDIUMIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious EPSS 0.1%CVE-2024-32892HIGHIn handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of prEPSS 0.1%CVE-2026-102757HIGHAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,EPSS 0.1%CVE-2025-64314CRITICALPermission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentEPSS 0.1%CVE-2023-20616MEDIUMIn ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System executionEPSS 0.1%CVE-2026-0314MEDIUMGlobalProtect App: Local Denial of Service (DoS) on WindowsEPSS 0.1%CVE-2025-58310HIGHPermission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confEPSS 0.1%CVE-2026-44640MEDIUMNanoMQ: QUIC Dialer Close Type ConfusionEPSS 0.1%CVE-2023-32835MEDIUMIn keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2023-32818MEDIUMIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2023-21056MEDIUMIn lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalatiEPSS 0.1%CVE-2023-20673MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2025-54649MEDIUMVulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerabilityEPSS 0.1%CVE-2024-20012MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-20747MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privilEPSS 0.1%CVE-2024-27236HIGHIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilegEPSS 0.1%