CWE-704— Incorrect Type Conversion or Cast
The product does not correctly convert an object, resource, or structure from one type to a different type.— MITRE CWE catalog
290 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-704page 1 of 6
- CVE-2010-1822HIGHCVSS 8.8EG 8.82010-10-04
WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial…
- CVE-2010-20115CRITICALCVSS 9.3EG 9.32025-08-21
Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsi…
- CVE-2011-0482MEDIUMCVSS v2 4.3EG 4.32011-01-14
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified…
- CVE-2011-0483MEDIUMCVSS v2 5.0EG 5.02011-01-14
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified o…
- CVE-2011-1200MEDIUMCVSS v2 6.8EG 6.82011-03-11
Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.
- CVE-2011-1441MEDIUMCVSS v2 6.8EG 6.82011-05-03
Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a c…
- CVE-2011-1460CRITICALCVSS 9.8EG 9.82019-11-05
WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
- CVE-2011-1799MEDIUMCVSS v2 6.8EG 6.82011-05-16
Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vecto…
- CVE-2011-1805HIGHCVSS 8.8EG 8.82020-06-03
Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2011-2337CRITICALCVSS 9.8EG 9.82019-11-07
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
- CVE-2011-3027MEDIUMCVSS v2 4.3EG 4.32012-02-16
Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted documen…
- CVE-2011-3036MEDIUMCVSS v2 6.8EG 6.82012-03-05
Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted docu…
- CVE-2011-3037MEDIUMCVSS v2 6.8EG 6.82012-03-05
Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a craf…
- CVE-2014-9627HIGHCVSS 7.8EG 7.82020-01-24
The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of serv…
- CVE-2015-5219HIGHCVSS 7.5EG 7.52017-07-21
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
- CVE-2016-4709HIGHCVSS 7.8EG 7.82016-09-25
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4710.
- CVE-2016-4710HIGHCVSS 7.8EG 7.82016-09-25
WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confusion," a different vulnerability than CVE-2016-4709.
- CVE-2016-5161HIGHCVSS 8.8EG 8.82016-09-11
The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows re…
- CVE-2016-5263HIGHCVSS 8.8EG 8.82016-08-05
The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages …
- CVE-2016-7156MEDIUMCVSS 4.4EG 4.42016-12-10
The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
- CVE-2016-7398CRITICALCVSS 9.8EG 9.82019-09-06
A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbi…
- CVE-2016-7617HIGHCVSS 7.8EG 7.82017-02-20
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (type con…
- CVE-2016-7655HIGHCVSS 7.8EG 7.82017-02-20
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreMedia External Displays" component. It allows local users to gain privileges or cause a denial of…
- CVE-2016-7860HIGHCVSS 8.8EG 8.82016-11-08
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2016-7861HIGHCVSS 8.8EG 8.82016-11-08
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2016-7865HIGHCVSS 8.8EG 8.82016-11-08
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.
- CVE-2016-7979CRITICALCVSS 9.8EG 9.82017-05-23
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
- CVE-2016-8602HIGHCVSS 7.8EG 7.82017-04-14
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with…
- CVE-2017-0037CRITICALCVSS 8.1EG 9.0⚠ KEV2017-02-26
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary …
- CVE-2017-0607HIGHCVSS 7.0EG 7.02017-05-12
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising …
- CVE-2017-11221HIGHCVSS 8.8EG 8.82017-08-11
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the annotation functionality. Successful exploitation could…
- CVE-2017-11257HIGHCVSS 8.8EG 8.82017-08-11
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in the XFA layout engine. Successful exploitation could lead t…
- CVE-2017-13855MEDIUMCVSS 5.5EG 5.52017-12-25
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …
- CVE-2017-13888HIGHCVSS 7.5EG 7.52019-01-11
In iOS before 11.2, a type confusion issue was addressed with improved memory handling.
- CVE-2017-14823HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14824HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14825HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14826HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14827HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14828HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14829HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14830HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14835HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-14837HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-15413HIGHCVSS 8.8EG 8.82018-08-28
Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2017-16367HIGHCVSS 8.8EG 8.82017-12-09
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a ty…
- CVE-2017-16379HIGHCVSS 8.8EG 8.82017-12-09
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability is an instance of a ty…
- CVE-2017-16571HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-16572HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
- CVE-2017-16578HIGHCVSS 8.8EG 8.82017-12-20
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.2.25013. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open…
Map vulnerabilities like CWE-704 to your infrastructure
EchelonGraph correlates every CVE — across CWE-704 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →