CWE-843— Access of Resource Using Incompatible Type (Type Confusion)
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.— MITRE CWE catalog
1,056 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-843page 19 of 22
- CVE-2022-23583MEDIUMCVSS 6.5EG 6.52022-02-04
Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that any binary op would trigger `CHECK` failures. This occurs when the protobuf part corresponding to …
- CVE-2022-21734MEDIUMCVSS 6.5EG 6.52022-02-03
Tensorflow is an Open Source Machine Learning Framework. The implementation of `MapStage` is vulnerable a `CHECK`-fail if the key tensor is not a scalar. The fix will be included in TensorFlow 2.8.0. We will also cherrypick this commit on …
- CVE-2022-21731MEDIUMCVSS 6.5EG 6.52022-02-03
Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for `ConcatV2` can be used to trigger a denial of service attack via a segfault caused by a type confusion. The `axis` argument is translated in…
- CVE-2019-8597MEDIUMCVSS 6.5EG 6.52019-12-18
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously cra…
- CVE-2019-11750MEDIUMCVSS 6.5EG 6.52019-09-27
A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and Firefox ESR < 68.1.
- CVE-2019-6984MEDIUMCVSS 6.5EG 6.52019-01-28
An issue was discovered in Foxit 3D Plugin Beta before 9.4.0.16807 for Foxit Reader and PhantomPDF. The application could encounter a Use-After-Free or Type Confusion and crash during handling of certain PDF files that embed specifically c…
- CVE-2017-5094MEDIUMCVSS 6.5EG 6.52017-10-27
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.
- CVE-2026-101912MEDIUMCVSS 6.3EG 6.32026-09-28
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use…
- CVE-2026-72844MEDIUMCVSS 6.3EG 6.32026-08-20
The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::add_inductive in src/kernel/inductive.cpp did not type check the nested inductive applica…
- CVE-2026-53600MEDIUMCVSS 6.3EG 6.32026-07-08
async-tar is a tar archive reading/writing library for async Rust. Prior to version 0.6.1, async-tar mis-applies a buffered PAX size extension to an intermediary extension header (a GNU longname L, a GNU longlink K, or a PAX x/g header) in…
- CVE-2026-21690MEDIUMCVSS 6.3EG 6.32026-01-07
iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles. Versions prior to 2.3.1.2 have a Type Confusion vulnerability in …
- CVE-2024-38207MEDIUMCVSS 6.3EG 6.32024-08-23
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
- CVE-2023-1235MEDIUMCVSS 6.3EG 6.32023-03-07
Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low)
- CVE-2021-39219MEDIUMCVSS 6.3EG 6.32021-09-17
Wasmtime is an open source runtime for WebAssembly & WASI. Wasmtime before version 0.30.0 is affected by a type confusion vulnerability. As a Rust library the `wasmtime` crate clearly marks which functions are safe and which are `unsafe`, …
- CVE-2019-2692MEDIUMCVSS 6.3EG 6.32019-04-23
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the in…
- CVE-2026-112606MEDIUMCVSS 6.2EG 6.22026-10-26
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2, tvOS 27.2, visionOS 27.2, …
- CVE-2026-88815MEDIUMCVSS 6.2EG 6.22026-09-28
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it fi…
- CVE-2026-88383MEDIUMCVSS 6.2EG 6.22026-09-24
libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data containing a parameterized property, the function passes icalparameter_compare_kind_map() to bsearch() through an incomp…
- CVE-2026-28822MEDIUMCVSS 6.2EG 6.22026-03-25
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An attacker may be ab…
- CVE-2025-43297MEDIUMCVSS 6.2EG 6.22025-09-15
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26. An app may be able to cause a denial-of-service.
- CVE-2023-46705MEDIUMCVSS 5.5EG 6.22023-11-20
in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.
- CVE-2025-24271MEDIUMCVSS 5.4EG 6.22025-04-29
An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An unauthenticated use…
- CVE-2026-58305MEDIUMCVSS 6.1EG 6.12026-07-09
Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. This issue affects Escargot: before 779f6bedf58f334dec64b0a51ebb724b4708b84a.
- CVE-2026-39956MEDIUMCVSS 6.1EG 6.12026-04-13
jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() without verifying they are strings, and jv_string_indexes() in src/jv.c relies …
- CVE-2026-22028MEDIUMCVSS 6.1EG 6.12026-01-08
Preact, a lightweight web development framework, JSON serialization protection to prevent Virtual DOM elements from being constructed from arbitrary JSON. A regression introduced in Preact 10.26.5 caused this protection to be softened. In …
- CVE-2022-34709MEDIUMCVSS 6.0EG 6.02022-08-09
Windows Defender Credential Guard Security Feature Bypass Vulnerability
- CVE-2026-48682MEDIUMCVSS 5.9EG 5.92026-06-02
FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. In src/simple_packet_parser_ng.cpp, after validating that the packet contains at least sizeof(ipv4_header_t) bytes (20 bytes), the code ad…
- CVE-2025-21225MEDIUMCVSS 5.9EG 5.92025-01-14
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
- CVE-2021-3320MEDIUMCVSS 5.9EG 5.92021-05-25
Type Confusion in 802154 ACK Frames Handling. Zephyr versions >= v2.4.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-27r3-rxch-2hm7
- CVE-2019-9816MEDIUMCVSS 5.9EG 5.92019-07-23
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated w…
- CVE-2026-17866MEDIUMCVSS 5.8EG 5.82026-07-30
Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Mediu…
- CVE-2020-6656MEDIUMCVSS 5.8EG 5.82021-01-07
Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malf…
- CVE-2026-115892MEDIUMCVSS 5.7EG 5.72026-10-23
Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns …
- CVE-2026-69679MEDIUMCVSS 5.7EG 5.72026-09-08
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
- CVE-2026-69637MEDIUMCVSS 5.7EG 5.72026-09-08
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
- CVE-2026-80185MEDIUMCVSS 5.7EG 5.72026-08-25
BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local…
- CVE-2021-23820MEDIUMCVSS 5.6EG 5.62021-11-03
This affects all versions of package json-pointer. A type confusion vulnerability can lead to a bypass of CVE-2020-7709 when the pointer components are arrays.
- CVE-2021-23807MEDIUMCVSS 5.6EG 5.62021-11-03
This affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.
- CVE-2021-23624MEDIUMCVSS 5.6EG 5.62021-11-03
This affects the package dotty before 0.1.2. A type confusion vulnerability can lead to a bypass of CVE-2021-25912 when the user-provided keys used in the path parameter are arrays.
- CVE-2021-23509MEDIUMCVSS 5.6EG 5.62021-11-03
This affects the package json-ptr before 3.0.0. A type confusion vulnerability can lead to a bypass of CVE-2020-7766 when the user-provided keys used in the pointer parameter are arrays.
- CVE-2021-23444MEDIUMCVSS 5.6EG 5.62021-09-21
This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.
- CVE-2021-23438MEDIUMCVSS 5.6EG 5.62021-09-01
This affects the package mpath before 0.8.4. A type confusion vulnerability can lead to a bypass of CVE-2018-16490. In particular, the condition ignoreProperties.indexOf(parts[i]) !== -1 returns -1 if parts[i] is ['__proto__']. This is bec…
- CVE-2021-23434MEDIUMCVSS 5.6EG 5.62021-08-27
This affects the package object-path before 0.11.6. A type confusion vulnerability can lead to a bypass of CVE-2020-15256 when the path components used in the path parameter are arrays. In particular, the condition currentPath === '__proto…
- CVE-2026-112550MEDIUMCVSS 5.5EG 5.52026-10-26
A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause a denial-of-service.
- CVE-2026-112547MEDIUMCVSS 5.5EG 5.52026-10-26
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2. An app may be able to access sensitive user data.
- CVE-2026-96854MEDIUMCVSS 5.5EG 5.52026-10-13
Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.
- CVE-2026-83664MEDIUMCVSS 5.5EG 5.52026-10-13
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
- CVE-2026-96921MEDIUMCVSS 5.5EG 5.52026-10-13
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.
- CVE-2026-70017MEDIUMCVSS 5.5EG 5.52026-10-13
Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
- CVE-2026-79611MEDIUMCVSS 5.5EG 5.52026-10-13
For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state t…
Map vulnerabilities like CWE-843 to your infrastructure
EchelonGraph correlates every CVE — across CWE-843 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →