Falhas do tipo CWE-843

800 resultados

Confusão de Tipo

Fraqueza onde o código trata um dado como se fosse de um tipo diferente do que realmente é, resultando em comportamento imprevisto e potencialmente perigoso. Um atacante pode explorar essa confusão para contornar validações, corromper memória ou executar código arbitrário.

Exemplo

Um navegador recebe um objeto JSON que deveria ser uma string, mas trata como um número inteiro para cálculos de offset em memória — ao somar um valor grande, o atacante causa leitura/escrita fora dos limites do buffer alocado.

Como mitigar

Sempre validar e converter explicitamente o tipo de dados na entrada, usando type checking ou casting seguro. Em linguagens com tipagem dinâmica (JavaScript, Python), adicione verificações de tipo antes de operações críticas; em linguagens compiladas, ative warnings de compilador para conversões implícitas suspeitas.

CVE-2026-20571MEDIUMIn afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hEPSS 0.1%CVE-2026-109282LOWImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML EncodersEPSS 0.1%CVE-2026-20587MEDIUMIn mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious EPSS 0.1%CVE-2024-32892HIGHIn handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of prEPSS 0.1%CVE-2026-102757HIGHAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,EPSS 0.1%CVE-2025-64314CRITICALPermission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentEPSS 0.1%CVE-2023-20616MEDIUMIn ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System executionEPSS 0.1%CVE-2026-0314MEDIUMGlobalProtect App: Local Denial of Service (DoS) on WindowsEPSS 0.1%CVE-2025-58310HIGHPermission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confEPSS 0.1%CVE-2026-44640MEDIUMNanoMQ: QUIC Dialer Close Type ConfusionEPSS 0.1%CVE-2023-21056MEDIUMIn lwis_slc_buffer_free of lwis_device_slc.c, there is a possible memory corruption due to type confusion. This could lead to local escalatiEPSS 0.1%CVE-2023-20673MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution EPSS 0.1%CVE-2024-20012MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2023-20747MEDIUMIn vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privilEPSS 0.1%CVE-2023-32835MEDIUMIn keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System exeEPSS 0.1%CVE-2024-27236HIGHIn aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilegEPSS 0.1%CVE-2023-32818MEDIUMIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%CVE-2024-20010MEDIUMIn keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with SystEPSS 0.1%CVE-2025-54649MEDIUMVulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerabilityEPSS 0.1%CVE-2023-32834MEDIUMIn secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with System executiEPSS 0.1%