CWE-704: Incorrect Type Conversion or Cast, page 2
Filter
The product does not correctly convert an object, resource, or structure from one type to a different type.
What the weakness is: CWE-704 at MITRE
Ask an AI about CWE-704
Show the prompt
Explain CWE-704: Incorrect Type Conversion or Cast and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/704.html and https://cve.bz/cve/cwe/704?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.3CVE-2010-20115ExploitEPSS 1.4%
Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing…
- 6.9CVE-2025-54429EPSS 0.5%
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. There are various account address types in Frontier, e.g. precompiled contracts, smart contracts, and externally owned accounts. Some EVM mechanisms s…
- 9.8CVE-2025-41648EPSS 0.8%
An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.
- 9.8CVE-2025-41646ExploitEPSS 51%
An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device
- 5.5CVE-2022-49873EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix wrong reg type conversion in release_reference() Some helper functions will allocate memory. To avoid memory leaks, the verifier requires the eBPF program to re…
- 5.5CVE-2025-37746EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly using struct device pci_dev as platform_data caused a kmemdup copy of pci_dev. Wors…
- 5.3CVE-2023-35816EPSS 0.6%
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
- 5.5CVE-2025-22044EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "only secondary bus families can be translated". This warni…
- 7.8CVE-2024-43058EPSS 0.1%
Memory corruption while processing IOCTL calls.
- 4.3CVE-2025-1057EPSS 0.4%
A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older…
- 7.5CVE-2025-20072EPSS 0.5%
Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.
- 6.5CVE-2025-21088EPSS 0.6%
Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend…
- 5.5CVE-2024-57839EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved: Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" This reverts commit 7c877586da3178974a8a94577b6045a48377ff25. Anders and Philippe…
- 7.5CVE-2024-47181EPSS 0.6%
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RP…
- 7.8CVE-2018-9339EPSS 0.09%
In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…
- 7.5CVE-2024-39590EPSS 1.0%
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of servic…
- 7.5CVE-2024-39589EPSS 1.0%
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of servic…
- 4.7CVE-2024-26015EPSS 0.5%
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version…
- 5.5CVE-2024-32893EPSS 0.2%
In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for e…
- 7.3CVE-2024-35303EPSS 0.3%
A vulnerability has been identified in Tecnomatix Plant Simulation V2302 (All versions < V2302.0012), Tecnomatix Plant Simulation V2404 (All versions < V2404.0001). The affected applications contain a type confusion vulnerability while par…
- 5.3CVE-2024-36735EPSS 0.4%
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.
- 5.5CVE-2024-21478EPSS 0.09%
transient DOS when setting up a fence callback to free a KGSL memory entry object during DMA.
- 7.3CVE-2024-5436EPSS 0.5%
Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.
- 7.5CVE-2024-28130EPSS 1.7%
An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS DCMTK 3.6.8. A specially crafted malformed file can lead to arbitrary code execution. An attacker can provide a maliciou…
- 7.5CVE-2023-33101EPSS 0.3%
Transient DOS while processing DL NAS TRANSPORT message with payload length 0.
- 3.7CVE-2024-2606EPSS 0.4%
Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.
- 9.8CVE-2023-6249EPSS 0.4%
Signed to unsigned conversion esp32_ipm_send
- 7.8CVE-2023-45204EPSS 0.2%
A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while par…
- 7.8CVE-2023-21651EPSS 0.1%
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
- 7.8CVE-2023-21627EPSS 0.1%
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
- 7.8CVE-2023-21638EPSS 0.1%
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
- 7.8CVE-2022-33240EPSS 0.1%
Memory corruption in Audio due to incorrect type cast during audio use-cases.
- 8.8CVE-2023-28162EPSS 0.7%
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird …
- 8.8CVE-2023-25737EPSS 0.7%
An invalid downcast from <code>nsTextNode</code> to <code>SVGElement</code> could have lead to undefined behavior. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- 7.8CVE-2023-21665EPSS 0.2%
Memory corruption in Graphics while importing a file.
- 7.8CVE-2022-33301EPSS 0.1%
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
- 7.8CVE-2022-40531EPSS 0.1%
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
- 7.8CVE-2022-25715EPSS 0.1%
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
- 7.5CVE-2022-41911EPSS 0.4%
TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*` array (since that's the underlying storage) and then we typecast it to the element type. However, conversions from `cha…
- 7.5CVE-2022-41890EPSS 0.5%
TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`, it will crash, despite being supposed to handle up to an `int64`. An example can be seen in `tf.experimental.numpy.outer…
- 8.1CVE-2022-3979EPSS 1.1%
A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to in…
- 7.8CVE-2022-41668EPSS 0.2%
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected P…
- 8.1CVE-2022-41828EPSS 1.9%
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.
- 7.5CVE-2020-10735EPSS 4.5%
A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.f…
- 7.8CVE-2022-22102EPSS 0.1%
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
- 6.7CVE-2022-21786EPSS 0.1%
In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822;…
- 7.5CVE-2022-25852EPSS 1.4%
All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:*…
- 7.8CVE-2022-32547EPSS 1.4%
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by Imag…
- 7.5CVE-2022-1642EPSS 0.7%
A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a …
- 7.8CVE-2021-35091EPSS 0.2%
Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connectivity, Snapdragon Mobile