CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

847 vulnerabilities with CWE-843
CVE-2022-21731 MEDIUM
TensorFlow < 2.5.3 - Denial of Service via ConcatV2 Shape Inference Type Confusion
CVSS 6.5
CVE-2021-33970 CRITICAL
Qihoo 360 Chrome 13.0.2170.0 - Buffer Overflow
CVSS 10.0
CVE-2021-46878 HIGH
Treasure Data Fluent Bit 1.7.1 - Use After Free
CVSS 7.8
CVE-2021-26635 HIGH
Bandisoft ARK Library < 7.17 - Type Confusion leading to Stack Buffer Overflow
CVSS 7.8
CVE-2021-32965 HIGH
Delta Electronics DIAScreen <1.1.0 - RCE
CVSS 7.8
CVE-2021-41041 MEDIUM
Eclipse Openj9 <0.32.0 - Code Injection
CVSS 5.3
CVE-2021-46743 CRITICAL
Firebase PHP-JWT <6.0.0 - Code Injection
CVSS 9.1
CVE-2021-26600 CRITICAL
ImpressCMS < 1.4.3 - Authentication Bypass via Type Confusion in autologin.php
CVSS 9.8
CVE-2021-40061 HIGH
Huawei EMUI - Type Confusion in Bastet Module
CVSS 7.5
CVE-2021-46463 CRITICAL
njs < 0.7.1 - Control Flow Hijack via Type Confusion in njs_promise_perform_then()
CVSS 9.8
CVE-2021-46152 HIGH
Simcenter Femap V2020.2-V2021.1 - Code Injection
CVSS 7.8
CVE-2021-34866 HIGH
Linux Kernel 5.8-5.14-rc3 - Local Privilege Escalation via eBPF Program Type Confusion
CVSS 7.8
CVE-2021-24044 CRITICAL
Hermes < 0.10.0 - Type Confusion via Invalid JavaScript Await/Yield
CVSS 9.8
CVE-2021-44647 MEDIUM
Lua >= 5.4.3 - Denial of Service via Type Confusion in funcnamefromcode
CVSS 5.5
CVE-2021-40037 MEDIUM
HarmonyOS < 2.0 - Denial of Service via MPTCP Type Confusion
CVSS 5.5
CVE-2021-39987 HIGH
HarmonyOS < 2.0 - Denial of Service in HwNearbyMain Module
CVSS 7.5
CVE-2021-4078 HIGH
Google Chrome <96.0.4664.93 - Heap Corruption
CVSS 8.8
CVE-2021-4061 HIGH
Google Chrome <96.0.4664.93 - Heap Corruption
CVSS 8.8
CVE-2021-4056 HIGH
Google Chrome <96.0.4664.93 - Heap Corruption
CVSS 8.8
CVE-2021-38012 HIGH
Google Chrome <96.0.4664.45 - Heap Corruption
CVSS 8.8
CVE-2021-38007 HIGH
Google Chrome <96.0.4664.45 - Heap Corruption
CVSS 8.8
CVE-2021-24045 CRITICAL
Facebook Hermes < 0.10.0 - Type Confusion via 'typeof' Operator
CVSS 9.8
CVE-2021-38001 HIGH
Google Chrome <95.0.4638.69 - Heap Corruption
CVSS 8.8
CVE-2021-41190 LOW
OCI Distribution Spec <1.0.0 - Info Disclosure
CVSS 3.0
CVE-2021-40872 HIGH
Softing Industrial Automation uaToolkit Embedded <1.40 - DoS
CVSS 7.5
Details
Vulnerabilities 847
Links
MITRE CWE Entry Search this CWE With Exploits