CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2022-26435 MEDIUM
Google Android - Out of Bounds Write via Type Confusion
CVSS 6.7
CVE-2022-26433 MEDIUM
Android - Local Privilege Escalation via Mailbox Type Confusion
CVSS 6.7
CVE-2022-26430 MEDIUM
Android - Local Privilege Escalation via Mailbox Type Confusion
CVSS 6.7
CVE-2022-2295 HIGH
Google Chrome < 103.0.5060.114 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2022-1869 MEDIUM
Google Chrome <102.0.5005.61 - Heap Corruption
CVSS 6.5
CVE-2022-1486 HIGH
Google Chrome < 101.0.4951.41 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-1364 HIGH KEV
Google Chrome < 100.0.4896.127 - Type Confusion in V8 Turbofan
CVSS 8.8
CVE-2022-1314 HIGH
Google Chrome < 100.0.4896.88 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-1232 HIGH
Google Chrome < 100.0.4896.75 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-1134 HIGH
Google Chrome < 100.0.4896.60 - Remote Code Execution via V8 Type Confusion
CVSS 8.8
CVE-2022-1096 HIGH KEV
Google Chrome < 99.0.4844.84 - Type Confusion in V8 via Crafted HTML Page
CVSS 8.8
CVE-2022-34221 HIGH
Adobe Acrobat Reader <22.001.20142, 20.005.30334, 17.012.30229 - Co...
CVSS 7.8
CVE-2022-34918 HIGH
Netfilter nft_set_elem_init Heap Overflow Privilege Escalation
CVSS 7.8
CVE-2022-1786 HIGH
Linux Kernel 5.10-5.11 - Use-After-Free in io_uring IORING_SETUP_IOPOLL
CVSS 7.8
CVE-2022-29209 MEDIUM
TensorFlow <2.9.0-2.6.4 - Info Disclosure
CVSS 5.5
CVE-2022-29181 HIGH
Nokogiri <1.13.6 - Memory Corruption
CVSS 8.2
CVE-2022-30557 HIGH
Foxit PDF Reader < 11.2.2 and PDF Editor < 10.1.7.37777 - Type Confusion via JavaScript Unsigned32 Mishandling
CVSS 7.5
CVE-2022-0795 HIGH
Google Chrome <99.0.4844.51 - Heap Corruption
CVSS 8.8
CVE-2022-0457 HIGH
Google Chrome <98.0.4758.80 - Heap Corruption
CVSS 8.8
CVE-2022-1176 HIGH
livehelperchat < 3.96 - Insecure Direct Object Reference via Loose Comparison
CVSS 7.5
CVE-2022-22661 HIGH
macOS < 10.15.7, 11.6-11.6.5 - Type Confusion leading to Privilege Escalation
CVSS 7.8
CVE-2022-21656 HIGH
envoyproxy/envoy < 1.20.2 - Improper Certificate Validation via subjectAltNames Type Confusion
CVSS 7.4
CVE-2022-0102 HIGH
Google Chrome <97.0.4692.71 - Heap Corruption
CVSS 8.8
CVE-2022-23583 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via SavedModel Type Confusion
CVSS 6.5
CVE-2022-21734 MEDIUM
TensorFlow < 2.5.3 - Type Confusion in MapStage Implementation
CVSS 6.5
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits