Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-843 (使用不兼容类型访问资源(类型混淆)) — Vulnerability Class 348

348 vulnerabilities classified as CWE-843 (使用不兼容类型访问资源(类型混淆)). AI Chinese analysis included.

CWE-843, Type Confusion, is a critical memory safety weakness where a resource is initialized with one data type but subsequently accessed using an incompatible type. This discrepancy often triggers logical errors or undefined behavior, particularly in memory-unsafe languages like C and C++, where the program misinterprets the underlying bit patterns. Attackers typically exploit this vulnerability by crafting malicious inputs that force the application to treat a pointer or object as a different type, potentially leading to arbitrary code execution, data corruption, or denial of service. To mitigate this risk, developers must enforce strict type checking and validation at runtime. Utilizing memory-safe programming languages, implementing comprehensive unit tests for type assertions, and employing static analysis tools can effectively detect these mismatches before deployment, ensuring that resources are always accessed according to their intended definitions.

MITRE CWE Description
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. When the product accesses the resource using an incompatible type, this could trigger logical errors because the resource does not have expected properties. In languages without memory safety, such as C and C++, type confusion can lead to out-of-bounds memory access. While this weakness is frequently associated with unions when parsing data with many different embedded object types in C, it can be present in any application that can interpret the same variable or memory location in multiple ways. This weakness is not unique to C and C++. For example, errors in PHP applications can be triggered by providing array parameters when scalars are expected, or vice versa. Languages such as Perl, which perform automatic conversion of a variable of one type when it is accessed as if it were another type, can also contain these issues.
Common Consequences (1)
Availability, Integrity, ConfidentialityRead Memory, Modify Memory, Execute Unauthorized Code or Commands, DoS: Crash, Exit, or Restart
When a memory buffer is accessed using the wrong type, it could read or write memory out of the bounds of the buffer, if the allocated buffer is smaller than the type that the code is attempting to access, leading to a crash and possibly code execution.
Examples (2)
The following code uses a union to support the representation of different types of messages. It formats messages differently, depending on their type.
#define NAME_TYPE 1 #define ID_TYPE 2 struct MessageBuffer { int msgType; union { char *name; int nameID; }; }; int main (int argc, char **argv) { struct MessageBuffer buf; char *defaultMessage = "Hello World"; buf.msgType = NAME_TYPE; buf.name = defaultMessage; printf("Pointer of buf.name is %p\n", buf.name); /* This particular value for nameID is used to make the code architecture-independent. If coming from untrusted input, it could be any value. */ buf.nameID = (int)(defaultMessage + 1); printf("Pointer of buf.name is now %p\n", buf.name); if (buf.msgType == NAME_TYPE) { printf("Message: %
Bad · C
The following PHP code accepts a value, adds 5, and prints the sum.
$value = $_GET['value']; $sum = $value + 5; echo "value parameter is '$value'<p>"; echo "SUM is $sum";
Bad · PHP
CVE IDTitleCVSSSeverityPublished
CVE-2018-14313 Foxit Reader和PhantomPDF 安全漏洞 — Foxit Reader 8.8 -2018-07-31
CVE-2018-10495 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2018-05-17
CVE-2018-7530 Omron CX-One多个软件安全漏洞 — Omron CX-One 7.8 -2018-04-17
CVE-2017-16745 Delta Industrial Automation Screen Editor 安全漏洞 — Delta Electronics Delta Industrial Automation Screen Editor 7.8 -2018-03-15
CVE-2017-14823 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14824 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14825 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14826 Foxit Reader 代码问题漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14827 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14828 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14829 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14830 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14835 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-14837 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-16571 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-16572 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-16578 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20
CVE-2017-16582 Foxit Reader 安全漏洞 — Foxit Reader 8.8 -2017-12-20

Vulnerabilities classified as CWE-843 (使用不兼容类型访问资源(类型混淆)) represent 348 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.