cve.bz

CWE-843: Access of Resource Using Incompatible Type (Type Confusion), page 10

Filter

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

What the weakness is: CWE-843 at MITRE

Ask an AI about CWE-843

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-843: Access of Resource Using Incompatible Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/843.html and https://cve.bz/cve/cwe/843?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.7CVE-2025-22151EPSS 0.4%

    Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations (Django, SQ…

  2. 8.8CVE-2025-0291EPSS 8.2%

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  3. 7.8CVE-2024-13049EPSS 0.2%

    Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required t…

  4. 7.8CVE-2024-13047EPSS 0.3%

    Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required t…

  5. 7.8CVE-2024-12836EPSS 0.3%

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interact…

  6. 7.8CVE-2024-12834EPSS 0.4%

    Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interact…

  7. 7.5CVE-2024-56522EPSS 0.6%

    An issue was discovered in TCPDF before 6.8.0. unserializeTCPDFtag uses != (aka loose comparison) and does not use a constant-time function to compare TCPDF tag hashes.

  8. 8.8CVE-2024-12692EPSS 7.1%

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  9. 5.5CVE-2024-54524EPSS 0.2%

    A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to access arbitrary files.

  10. 8.8CVE-2024-54505EPSS 1.1%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web …

  11. 8.1CVE-2024-49119EPSS 1.2%

    Windows Remote Desktop Services Remote Code Execution Vulnerability

  12. 8.8CVE-2024-12381EPSS 4.8%

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  13. 8.8CVE-2024-12053EPSS 1.0%

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

  14. 7.8CVE-2024-11508EPSS 0.4%

    IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulner…

  15. 7.8CVE-2024-11507EPSS 0.4%

    IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulner…

  16. 7.8CVE-2018-9471EPSS 0.2%

    In the deserialization constructor of NanoAppFilter.java, there is a possible loss of data due to type confusion. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User in…

  17. 8.8CVE-2024-11395EPSS 0.4%

    Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  18. 7.8CVE-2018-9339EPSS 0.09%

    In writeTypedArrayList and readTypedArrayList of Parcel.java, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…

  19. 9.8CVE-2024-43498EPSS 3.6%

    .NET and Visual Studio Remote Code Execution Vulnerability

  20. 6.7CVE-2024-20106EPSS 0.08%

    In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0896050…

  21. 8.8CVE-2024-10231EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  22. 8.8CVE-2024-10230EPSS 0.7%

    Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  23. 7.1CVE-2024-49860EPSS 0.3%

    In the Linux kernel, the following vulnerability has been resolved: ACPI: sysfs: validate return type of _STR method Only buffer objects are valid return values of _STR. If something else is returned description_show() will access inval…

  24. 8.8CVE-2024-43596EPSS 1.0%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  25. 8.8CVE-2024-9859EPSS 0.5%

    Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

  26. 8.8CVE-2024-9603EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  27. 8.8CVE-2024-9602EPSS 0.8%

    Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

  28. 9.8CVE-2024-7825EPSS 0.4%

    Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shie…

  29. 9.8CVE-2024-7824EPSS 0.4%

    Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Webroot SecureAnywhere - Web Shield on Windows, ARM, 64 bit, 32 bit (wrUrl.Dll modules) allows Functionality Misuse.This issue affects SecureAnywhere - Web Shie…

  30. 4.3CVE-2024-47804EPSS 0.7%

    If an attempt is made to create an item of a type prohibited by `ACL#hasCreatePermission2` or `TopLevelItemDescriptor#isApplicableIn(ItemGroup)` through the Jenkins CLI or the REST API and either of these checks fail, Jenkins 2.478 and ear…

  31. 8.8CVE-2024-9122EPSS 6.3%

    Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  32. 8.8CVE-2024-43489EPSS 0.8%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  33. 8.8CVE-2024-8904EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  34. 7.8CVE-2024-45112EPSS 0.5%

    Acrobat Reader versions 24.002.21005, 24.001.30159, 20.005.30655, 24.003.20054 and earlier are affected by a Type Confusion vulnerability that could result in arbitrary code execution in the context of the current user. This issue occurs w…

  35. 8.8CVE-2024-8638EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

  36. 7.5CVE-2024-7652EPSS 0.7%

    An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13,…

  37. 7.5CVE-2024-6119EPSS 67%

    Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Ab…

  38. 9.8CVE-2024-8385EPSS 0.6%

    A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

  39. 9.8CVE-2024-8381EPSS 4.4%

    A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird…

  40. 8.8CVE-2024-8194EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  41. 6.3CVE-2024-38207EPSS 0.4%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  42. 7.8CVE-2024-38209EPSS 0.7%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  43. 9.6CVE-2024-7971KEVEPSS 21%

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  44. 8.8CVE-2024-7969EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  45. 5.5CVE-2024-34742EPSS 0.08%

    In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. U…

  46. 8.6CVE-2024-43357EPSS 0.7%

    ECMA-262 is the language specification for the scripting language ECMAScript. A problem in the ECMAScript (JavaScript) specification of async generators, introduced by a May 2021 spec refactor, may lead to mis-implementation in a way that …

  47. 7.5CVE-2024-38178KEVEPSS 41%

    Scripting Engine Memory Corruption Vulnerability

  48. 9.0CVE-2024-38219EPSS 0.9%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  49. 7.8CVE-2024-38218EPSS 0.6%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  50. 8.8CVE-2024-7550EPSS 0.7%

    Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)