CWE-704

Incorrect Type Conversion or Cast

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not correctly convert an object, resource, or structure from one type to a different type.

258 vulnerabilities with CWE-704
CVE-2021-4456 MEDIUM
Net::CIDR <0.24 - Auth Bypass
CVSS 6.5
CVE-2026-27809 CRITICAL
psd-tools <1.12.2 - DoS
CVSS 9.1
CVE-2025-40541 CRITICAL
Serv-U - Privilege Escalation
CVSS 9.1
CVE-2025-40540 CRITICAL
Serv-U - Memory Corruption
CVSS 9.1
CVE-2025-40539 CRITICAL
Serv-U - Memory Corruption
CVSS 9.1
CVE-2026-25613 MEDIUM
MongoDB - DoS
CVSS 6.5
CVE-2026-25518 MEDIUM
Cert-manager < 1.18.5 - Denial of Service
CVSS 5.9
CVE-2026-25503 HIGH
Color Iccdev < 2.3.1.2 - Type Confusion
CVSS 7.1
CVE-2026-24856 HIGH
iccDEV <2.3.1.2 - RCE
CVSS 7.8
CVE-2025-71002 MEDIUM
Oneflow - Divide By Zero
CVSS 6.5
CVE-2025-12781 MEDIUM
base64 module - Info Disclosure
CVSS 5.3
CVE-2026-22041 MEDIUM
Logging Redactor <0.0.6 - Type Error
CVSS 5.3
CVE-2026-21692 HIGH
Color Iccdev < 2.3.1.2 - Type Confusion
CVSS 8.8
CVE-2026-21673 HIGH
Color Iccdev < 2.3.1.1 - Integer Overflow
CVSS 7.8
CVE-2025-13720 HIGH
Google Chrome <143.0.7499.41 - Heap Corruption
CVSS 8.8
CVE-2025-62494 HIGH
Quickjs < 2025-09-13 - Out-of-Bounds Access
CVSS 8.8
CVE-2025-39880 HIGH
Linux kernel - Memory Corruption
CVSS 7.8
CVE-2010-20115
Vermillion FTP Daemon <1.31 - Memory Corruption
CVE-2025-54429
Polkadot Frontier - Info Disclosure
CVE-2025-41648 CRITICAL
IndustrialPI - Auth Bypass
CVSS 9.8
CVE-2025-41646 CRITICAL
Software Package - Auth Bypass
CVSS 9.8
CVE-2022-49873 MEDIUM
Linux kernel - Memory Corruption
CVSS 5.5
CVE-2025-37746 MEDIUM
Linux kernel - Info Disclosure
CVSS 5.5
CVE-2023-35816 LOW
DevExpress <23.1.3 - Code Injection
CVSS 3.5
CVE-2025-22044 MEDIUM
Linux kernel - Info Disclosure
CVSS 5.5
Details
Vulnerabilities 258
Links
MITRE CWE Entry Search this CWE With Exploits