CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

789 vulnerabilities with CWE-843
CVE-2023-3420 HIGH
Google Chrome < 114.0.5735.198 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-32439 HIGH KEV
Safari < 16.5.1 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2023-27930 HIGH
iPadOS < 16.5 - Type Confusion leading to Arbitrary Code Execution with Kernel Privileges
CVSS 7.8
CVE-2023-3022 MEDIUM
Linux Kernel < 5.1 - Denial of Service via IPv6 fib6_rule_lookup Type Confusion
CVSS 5.5
CVE-2023-3216 HIGH
Google Chrome < 114.0.5735.133 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2023-20747 MEDIUM
iot-yocto - Local Denial of Service via Type Confusion in vcu
CVSS 4.4
CVE-2023-3079 HIGH KEV
Google Chrome <114.0.5735.110 - Heap Corruption
CVSS 8.8
CVE-2023-28162 HIGH
Firefox < 111.0 and Firefox ESR < 102.9 - Type Confusion in AudioWorklet Implementation
CVSS 8.8
CVE-2023-2936 HIGH
Google Chrome < 114.0.5735.90 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-2935 HIGH
Google Chrome < 114.0.5735.90 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-24599 MEDIUM
OX App Suite <7.10.6-rev37 - Privilege Escalation
CVSS 4.3
CVE-2023-25933 CRITICAL
Facebook Hermes - Remote Code Execution via TypedArray Type Confusion
CVSS 9.8
CVE-2023-23557 CRITICAL
Facebook Hermes < 2023-01-10 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2023-2724 HIGH
Google Chrome < 113.0.5672.126 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2023-20673 MEDIUM
mediatek iot_yocto - Local Privilege Escalation via Type Confusion in vcu
CVSS 6.7
CVE-2023-24944 MEDIUM
Windows Bluetooth - Info Disclosure
CVSS 6.5
CVE-2023-24823 CRITICAL
RIOT-OS <2022.10 - Memory Corruption
CVSS 9.8
CVE-2023-2033 HIGH KEV
Google Chrome < 112.0.5615.121 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2023-28243 HIGH
Microsoft Windows PostScript and PCL6 Class Printer Driver - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2023-24929 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-24927 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-24885 HIGH
Microsoft PostScript and PCL6 Class Printer Driver - RCE
CVSS 8.8
CVE-2023-26063 CRITICAL
Lexmark <2023-02-19 - Info Disclosure
CVSS 9.8
CVE-2023-1078 HIGH
Linux Kernel 4.17-4.19.273 - Type Confusion in RDS Protocol via rds_rm_zerocopy_callback
CVSS 7.8
CVE-2023-1077 HIGH
Linux Kernel 2.6.25-4.19.293 - Use-After-Free via pick_next_rt_entity Type Confusion
CVSS 7.0
Details
Vulnerabilities 789
Links
MITRE CWE Entry Search this CWE With Exploits