CWE-704— Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.— MITRE CWE catalog
312 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-704page 7 of 7
- CVE-2022-41890MEDIUMCVSS 4.8EG 4.82022-11-18
TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`, it will crash, despite being supposed to handle up to an `int64`. An example can be seen in `tf.experimental.numpy.outer…
- CVE-2016-7156MEDIUMCVSS 4.4EG 4.42016-12-10
The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
- CVE-2026-86348MEDIUMCVSS 4.3EG 4.32026-09-14
Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2…
- CVE-2026-87546MEDIUMCVSS 4.3EG 4.32026-09-09
Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Low)
- CVE-2025-1057MEDIUMCVSS 4.3EG 4.32025-03-15
A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older…
- CVE-2011-3027MEDIUMCVSS v2 4.3EG 4.32012-02-16
Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted documen…
- CVE-2011-0482MEDIUMCVSS v2 4.3EG 4.32011-01-14
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified…
- CVE-2024-2606LOWCVSS 3.7EG 3.72024-03-19
Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.
- CVE-2023-35816LOWCVSS 3.5EG 3.52025-04-28
DevExpress before 23.1.3 allows arbitrary TypeConverter conversion.
- CVE-2024-26015LOWCVSS 3.4EG 3.42024-07-09
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version…
- CVE-2018-18386LOWCVSS 3.3EG 3.32018-10-17
drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ.
- CVE-2026-104634LOWCVSS 2.3EG 2.32026-10-08
Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's dispatch function as the strings "true", "false" and "nil". Aft…
Map vulnerabilities like CWE-704 to your infrastructure
EchelonGraph correlates every CVE — across CWE-704 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →