cve.bz

CWE-843: Access of Resource Using Incompatible Type (Type Confusion), page 11

Filter

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

What the weakness is: CWE-843 at MITRE

Ask an AI about CWE-843

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-843: Access of Resource Using Incompatible Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/843.html and https://cve.bz/cve/cwe/843?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2024-7520EPSS 0.6%

    A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

  2. 7.5CVE-2024-40803EPSS 1.2%

    A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An attacker may be able to cause unexpected app termination.

  3. 5.5CVE-2024-40788EPSS 0.3%

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, wat…

  4. 8.0CVE-2024-37987EPSS 1.3%

    Secure Boot Security Feature Bypass Vulnerability

  5. 3.3CVE-2024-36278EPSS 0.1%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  6. 3.3CVE-2024-31071EPSS 0.1%

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.

  7. 9.8CVE-2024-20078EPSS 0.3%

    In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08737250; Issu…

  8. 8.8CVE-2024-6100EPSS 1.1%

    Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

  9. 7.4CVE-2024-32922EPSS 0.08%

    In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed…

  10. 7.8CVE-2024-32919EPSS 0.08%

    In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

  11. 7.8CVE-2024-32892EPSS 0.1%

    In handle_init of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita…

  12. 6.5CVE-2024-5843EPSS 0.5%

    Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)

  13. 8.8CVE-2024-5838EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  14. 8.8CVE-2024-5837EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  15. 8.8CVE-2024-5833EPSS 0.5%

    Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

  16. 8.8CVE-2024-5830EPSS 0.9%

    Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

  17. 8.5CVE-2024-5597EPSS 0.5%

    Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution.

  18. 7.3CVE-2024-5436EPSS 0.5%

    Type confusion in Snapchat LensCore could lead to denial of service or arbitrary code execution prior to version 12.88. We recommend upgrading to version 12.88 or above.

  19. 8.5CVE-2024-5271EPSS 0.4%

    Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in arbitrary code execution.

  20. 9.6CVE-2024-5274KEVEPSS 7.7%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  21. 8.1CVE-2024-5158EPSS 0.6%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  22. 6.5CVE-2023-46842EPSS 8.5%

    Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be ab…

  23. 9.6CVE-2024-4947KEVEPSS 15%

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  24. 5.5CVE-2024-30034EPSS 6.9%

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

  25. 7.3CVE-2024-32063EPSS 0.4%

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the cur…

  26. 7.3CVE-2024-32062EPSS 0.4%

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the cur…

  27. 7.3CVE-2024-32057EPSS 0.4%

    A vulnerability has been identified in Simcenter Femap (All versions < V2406). The affected application contains a type confusion vulnerability while parsing IGS files. This could allow an attacker to execute code in the context of the cur…

  28. 7.8CVE-2023-51560EPSS 0.4%

    Foxit PDF Reader Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit thi…

  29. 7.8CVE-2023-42105EPSS 0.5%

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required t…

  30. 7.8CVE-2023-42102EPSS 0.6%

    Ashlar-Vellum Cobalt AR File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required t…

  31. 7.8CVE-2023-42074EPSS 0.4%

    PDF-XChange Editor addScript Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit …

  32. 7.8CVE-2023-38091EPSS 0.4%

    Kofax Power PDF response Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vu…

  33. 8.1CVE-2024-34394EPSS 1.0%

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes XmlNode::get_local_namespaces()) on a grand-child of a node that refers to an entity. Th…

  34. 8.1CVE-2024-34393EPSS 1.0%

    libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both…

  35. 9.8CVE-2024-34392EPSS 1.1%

    libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namespaces() function (which invokes _wrap__xmlNode_nsDef_get()) on a grand-child of a node that refers to an entity. This vul…

  36. 9.8CVE-2024-34391EPSS 1.1%

    libxmljs is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function on the result of attrs() that was called on a parsed node. This vulnerability might lead to denial of service (on both …

  37. 8.8CVE-2024-4058EPSS 8.8%

    Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

  38. 8.8CVE-2024-25575EPSS 18%

    A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory …

  39. 6.5CVE-2023-50433EPSS 0.3%

    marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet. The crash is caused by a type confusion bug that results in a large memory allocation;…

  40. 7.3CVE-2024-26232EPSS 0.9%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  41. 8.8CVE-2024-20678EPSS 2.5%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  42. 5.5CVE-2024-30266EPSS 0.3%

    wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, whe…

  43. 7.8CVE-2024-3298EPSS 0.3%

    Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code w…

  44. 7.8CVE-2024-30357EPSS 0.8%

    Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to ex…

  45. 5.5CVE-2024-21834EPSS 0.2%

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  46. 7.7CVE-2024-2887EPSS 18%

    Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

  47. 7.8CVE-2024-1848EPSS 0.3%

    Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS D…

  48. 8.4CVE-2024-27236EPSS 0.09%

    In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  49. 5.5CVE-2023-49602EPSS 0.1%

    in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.

  50. 8.8CVE-2024-1939EPSS 2.4%

    Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)