Falhas do tipo CWE-843

684 resultados

Confusão de Tipo

Fraqueza onde o código trata um dado como se fosse de um tipo diferente do que realmente é, resultando em comportamento imprevisto e potencialmente perigoso. Um atacante pode explorar essa confusão para contornar validações, corromper memória ou executar código arbitrário.

Exemplo

Um navegador recebe um objeto JSON que deveria ser uma string, mas trata como um número inteiro para cálculos de offset em memória — ao somar um valor grande, o atacante causa leitura/escrita fora dos limites do buffer alocado.

Como mitigar

Sempre validar e converter explicitamente o tipo de dados na entrada, usando type checking ou casting seguro. Em linguagens com tipagem dinâmica (JavaScript, Python), adicione verificações de tipo antes de operações críticas; em linguagens compiladas, ative warnings de compilador para conversões implícitas suspeitas.

CVE-2024-49196HIGHAn issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400. Type confusion leads to a Denial of Service.EPSS 0.4%CVE-2023-38073HIGHA vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), TeamcenEPSS 0.4%CVE-2026-50381MEDIUMComposite Image File System driver (cimfs.sys) Information Disclosure VulnerabilityEPSS 0.4%CVE-2026-94083CRITICALSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even thEPSS 0.4%CVE-2025-22153HIGHtry/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreterEPSS 0.4%CVE-2024-38207MEDIUMMicrosoft Edge (HTML-based) Memory Corruption VulnerabilityEPSS 0.4%CVE-2023-38091HIGHKofax Power PDF response Type Confusion Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-33055MEDIUMtar-rs incorrectly ignores PAX size headers if header size is nonzeroEPSS 0.4%CVE-2026-69308MEDIUMMicrosoft Standard XPS Information Disclosure VulnerabilityEPSS 0.4%CVE-2023-44108HIGHType confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.EPSS 0.4%CVE-2026-44325HIGHfree5GC: NRF POST /oauth2/token structured-form parser type-confusion panic family (Reflect.Set on incompatible types)EPSS 0.4%CVE-2026-10962HIGHType Confusion in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a cEPSS 0.4%CVE-2026-10936HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2026-10935HIGHType Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafEPSS 0.4%CVE-2024-32057HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32063HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2024-32062HIGHA vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerabilEPSS 0.4%CVE-2025-41738HIGHCODESYS Control - Invalid type usage in visualizationEPSS 0.4%CVE-2022-29209MEDIUMType confusion leading to `CHECK`-failure based denial of service in TensorFlowEPSS 0.4%CVE-2026-76047HIGHType confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a cEPSS 0.4%