CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

Parent: CWE-704 - Incorrect Type Conversion or Cast

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

791 vulnerabilities with CWE-843
CVE-2019-13519 HIGH
Rockwell Automation Arena < 16.00.00 - Information Exposure via Malicious Program File
CVSS 7.8
CVE-2019-5183 CRITICAL
AMD ATIDXX64.DLL <26.20.13031.10003-26.20.13031.18002 - RCE
CVSS 9.0
CVE-2019-17017 HIGH
Firefox < 72.0 and Firefox ESR < 68.4 - Type Confusion
CVSS 8.8
CVE-2019-8597 MEDIUM
iCloud < 7.12 - Remote Code Execution via Malicious Web Content
CVSS 6.5
CVE-2019-8591 HIGH
iPhone OS < 12.3 - Type Confusion
CVSS 7.1
CVE-2019-8506 HIGH KEV
iCloud < 7.11 - Remote Code Execution via Type Confusion
CVSS 8.8
CVE-2019-5815 HIGH
libxslt < 1.1.33 - Type Confusion in xsltNumberFormatGetMultipleLevel
CVSS 7.5
CVE-2019-13764 HIGH
Google Chrome <79.0.3945.79 - Heap Corruption
CVSS 8.8
CVE-2019-13730 HIGH
Google Chrome <79.0.3945.79 - Heap Corruption
CVSS 8.8
CVE-2019-19391 CRITICAL
LuaJIT < 2.0.5 and Moonjit < 2.1.2 - Arbitrary Memory Write or Read via debug.getinfo Type Confusion
CVSS 9.1
CVE-2019-8200 CRITICAL
Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Type Confusion leading to Remote Code Execution
CVSS 9.8
CVE-2019-8169 CRITICAL
Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Type Confusion leading to Remote Code Execution
CVSS 9.8
CVE-2019-8167 CRITICAL
Adobe Acrobat and Reader DC < 15.006.30504, 15.008.20082-19.021.20047 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2019-8161 CRITICAL
Adobe Acrobat and Reader DC - Type Confusion leading to Remote Code Execution
CVSS 9.8
CVE-2019-17675 HIGH
WordPress < 5.2.4 - Cross-Site Request Forgery via Type Confusion in Admin Referer Validation
CVSS 8.8
CVE-2019-5047 HIGH
NitroPDF - Use-After-Free via CharProcs Parsing
CVSS 7.8
CVE-2019-13330 HIGH
Foxit Reader < 9.6.0.25114 - Remote Code Execution via JPG File Processing
CVSS 7.8
CVE-2019-13329 HIGH
Foxit Reader < 9.6.0.25114 - Remote Code Execution via TIF File Processing
CVSS 7.8
CVE-2019-11750 MEDIUM
Firefox < 69.0 and Firefox ESR < 68.1.0 - Type Confusion in Spidermonkey
CVSS 6.5
CVE-2019-7975 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2019-7974 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Type Confusion leading to Arbitrary Code Execution
CVSS 9.8
CVE-2019-7973 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2019-7972 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2019-7971 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Remote Code Execution via Type Confusion
CVSS 9.8
CVE-2019-7970 CRITICAL
Adobe Photoshop CC < 19.1.8 and <= 20.0.5 - Type Confusion leading to Arbitrary Code Execution
CVSS 9.8
Details
Vulnerabilities 791
Links
MITRE CWE Entry Search this CWE With Exploits