Falhas do tipo CWE-704

104 resultados

Conversão ou casting incorreto de tipo

Ocorre quando o código converte um objeto ou dado de um tipo para outro de forma inadequada, sem validar se a conversão é segura ou se preserva a semântica esperada. Isso pode levar a interpretações erradas dos dados, corrupção de estado ou execução de código com privilégios indevidos.

Exemplo

Um aplicativo recebe um ponteiro genérico (void*) de rede e faz casting direto para uma estrutura específica sem verificar o tipo real. Se o servidor enviar dados de um tipo diferente, o acesso aos campos interpretará lixo de memória como valores válidos, causando lógica corrompida ou crash.

Como mitigar

Implemente validação de tipo antes de qualquer conversão (use type tags, discriminadores ou metadados). Prefira conversões explícitas que falham seguramente em vez de casts silenciosos; em linguagens como C, use structs com type identifiers ou serialize/desserialize com schema validation (JSON Schema, Protocol Buffers).

CVE-2026-28609HIGHIn read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to improper casting. This could lead to remote code execution EPSS 0.4%CVE-2026-121262MEDIUMphpMyAdmin SQL-Parser ExplainStatement.php parse type conversionEPSS 0.4%CVE-2026-25518MEDIUMcert-manager-controller DoS via Specially Crafted DNS ResponseEPSS 0.4%CVE-2026-21692HIGHiccDEV has Type Confusion in ToXmlCurve() at IccXML/IccLibXML/IccMpeXml.cppEPSS 0.4%CVE-2026-110816MEDIUMqs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringEPSS 0.4%CVE-2026-44223MEDIUMvLLM: extract_hidden_states speculative decoding crashes server on any request with penalty parametersEPSS 0.4%CVE-2026-86348MEDIUMMS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin processEPSS 0.4%CVE-2024-36735MEDIUMOneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.EPSS 0.4%CVE-2026-104634LOWbeam_mcp: JSON boolean and null tool arguments reach dispatch as stringsEPSS 0.3%CVE-2026-50337HIGHWindows Notification Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2026-69585HIGHMicrosoft Windows Search Component Elevation of Privilege VulnerabilityEPSS 0.3%CVE-2025-13720HIGHBad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentiallyEPSS 0.3%CVE-2023-33101HIGHIncorrect Type Conversion or Cast in Multi-Mode Call ProcessorEPSS 0.3%CVE-2025-71002MEDIUMA floating-point exception (FPE) in the flow.column_stack component of OneFlow v0.9.0 allows attackers to cause a Denial of Service (DoS) viEPSS 0.3%CVE-2026-25503HIGHiccDEV Has Type Confusion in CIccTagEmbeddedHeightImage::Validate()EPSS 0.3%CVE-2026-104420MEDIUMZebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped BlocksEPSS 0.3%CVE-2026-34379HIGHOpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)EPSS 0.3%CVE-2026-25613HIGHAn unsafe cast in the MongoDB query planner can result in a segmentation fault.EPSS 0.3%CVE-2026-122319HIGHKyverno before 1.19.2 Denial of Service via In/NotIn Operator PanicEPSS 0.3%CVE-2026-22041LOWloggingredactor converts non-string types to string types in logsEPSS 0.3%