CWE-704

Incorrect Type Conversion or Cast

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not correctly convert an object, resource, or structure from one type to a different type.

273 vulnerabilities with CWE-704
CVE-2022-1642 HIGH
swift-corelibs-foundation < 5.6.2 - Denial of Service via JSON Type Mismatch
CVSS 7.5
CVE-2022-0322 MEDIUM
Linux Kernel < 5.15 - Denial of Service via SCTP Buffer Overflow in sctp_make_strreset_req
CVSS 5.5
CVE-2021-4456 MEDIUM
Net::CIDR < 0.24 - Incorrect Type Conversion via Leading Zero Handling
CVSS 6.5
CVE-2021-35091 HIGH
Snapdragon Connectivity - Memory Corruption
CVSS 8.4
CVE-2021-33318 CRITICAL
Joel Christner .NET C# packages - Input Validation Vulnerability
CVSS 9.8
CVE-2021-35110 HIGH
Snapdragon Connectivity, Snapdragon Mobile - Buffer Overflow
CVSS 8.1
CVE-2021-35105 HIGH
Qualcomm APQ8009W Firmware - Out-of-Bounds Access via Graphics Profiling Input Validation
CVSS 8.4
CVE-2021-28275 MEDIUM
jhead 3.04-3.05 - Denial of Service via Wild Address Read in Get16u Function
CVSS 5.5
CVE-2021-3578 HIGH
mbsync <1.3.6 and 1.4.2 - Code Execution via APPENDUID Heap Overflow
CVSS 7.8
CVE-2021-23566 MEDIUM
nanoid 3.0.0-3.1.30 - Information Exposure via valueOf() Function
CVSS 4.0
CVE-2021-30300 HIGH
Snapdragon Auto- Snapdragon Compute - DoS
CVSS 7.5
CVE-2021-39989 HIGH
HarmonyOS < 2.0 - Exposure of Sensitive Information via HwNearbyMain Module
CVSS 7.5
CVE-2021-1027 HIGH
Android - Local Privilege Escalation via SurfaceFlinger setTransactionState Improper Casting
CVSS 7.8
CVE-2021-43537 HIGH
Thunderbird <91.4.0-Firefox <95 - Memory Corruption
CVSS 8.8
CVE-2021-1923 HIGH
Snapdragon Auto - Memory Corruption
CVSS 7.8
CVE-2021-39173 HIGH
Cachet <2.5.1 - Authenticated RCE
CVSS 8.8
CVE-2021-35942 CRITICAL
GNU C Library <2.33 - Memory Corruption
CVSS 9.1
CVE-2021-29424 HIGH
Net::Netmask <2.0000 - Info Disclosure
CVSS 7.5
CVE-2021-28918 CRITICAL
netmask < 1.0.6 - Unauthenticated SSRF RFI and LFI via Octal String Bypass
CVSS 9.1
CVE-2021-29662 HIGH
Data::Validate::IP <0.29 - Info Disclosure
CVSS 7.5
CVE-2021-25175 HIGH
Open Design Alliance Drawings SDK <2021.11 - Crash
CVSS 7.8
CVE-2020-10735 HIGH
Python 3.7.0-3.7.13 - Denial of Service via int() with Non-Binary Bases
CVSS 7.5
CVE-2020-16103 HIGH
Gallagher Command Centre < 8.00 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2020-25576 CRITICAL
Rust rand_core <0.4.2 - Info Disclosure
CVSS 9.8
CVE-2020-6151 CRITICAL
Accusoft ImageGear <19.7 - Memory Corruption
CVSS 9.8
Details
Vulnerabilities 273
Links
MITRE CWE Entry Search this CWE With Exploits