Skip to content

CWE-704 · Memory Corruption

Incorrect Type Conversion or Cast

202CVEs

202 CVEs with CWE-704 as their weakness

CVEs with CWE-704, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2025-41646CheckRevPi Webstatus <= v2.4.5 - Authentication BypassKunbus · Revolution Pi webstatus · CVSS 9.8 · 2025-06-069.851%2025-06-06
CVE-2021-28918CheckNetmask NPM Package - Server-Side Request ForgeryNetmask Project · Netmask · 2021-04-01–15%2021-04-01
CVE-2026-15826CheckUser Profile Builder 3.16.4 - Unauthenticated Authentication Bypasscozmoslabs · User Profile Builder – Beautiful User Registration Forms, User Profiles & User… · CVSS 9.8 · 2026-08-159.83.9%2026-08-15
CVE-2017-5115Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Google · Google Chrome prior to 61.0.3163.79 for Windows · 2017-10-27–26%2017-10-27
CVE-2018-12453Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP command in which th…Redislabs · Redis · 2018-06-16–23%2018-06-16
CVE-2017-3106Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation could lead to arbitrary code ex…Adobe Systems Incorporated · Flash Player · 2017-08-11–22%2017-08-11
CVE-2018-3843An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotations. A specially crafted PDF document c…Talos · Foxit · CVSS 6.5 · 2018-04-196.522%2018-04-19
CVE-2018-5007Adobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren…Adobe · Adobe Flash Player 30.0.0.113 and earlier versions · 2018-07-20–18%2018-07-20
CVE-2018-12794Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20–16%2018-07-20
CVE-2018-12386A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed…Mozilla · Firefox ESR · 2018-10-18–14%2018-10-18
CVE-2018-15981Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Flash Player · 2018-11-29–12%2018-11-29
CVE-2017-2962Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related t…Adobe · Adobe Acrobat Reader 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.1… · 2017-01-11–9.9%2017-01-11
CVE-2018-6056Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a c…Google · Chrome · 2019-01-09–9.4%2019-01-09
CVE-2018-4953Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier… · 2018-07-09–9.3%2018-07-09
CVE-2018-12793Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20–9.3%2018-07-20
CVE-2018-5057Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20–9.1%2018-07-20
CVE-2017-11221Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…Adobe Systems Incorporated · Acrobat Reader · 2017-08-11–8.9%2017-08-11
CVE-2018-12812Adobe Acrobat and Reader 2018.011.20038 and earlier, 2017.011.30079 and earlier, and 2015.006.30417 and earlier versions have a Type Confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier… · 2018-07-20–8.6%2018-07-20
CVE-2018-4944Adobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context…Adobe · Adobe Flash Player 29.0.0.140 and earlier versions · 2018-05-19–8.5%2018-05-19
CVE-2017-11257Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 and earlier has an exploitable type confusion vulnerability in…Adobe Systems Incorporated · Acrobat Reader · 2017-08-11–8.4%2017-08-11
CVE-2015-3120Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK befor…Adobe · Flash Player · 2015-07-09–7.4%2015-07-09
CVE-2016-7861Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08–7.3%2016-11-08
CVE-2016-7860Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08–7.3%2016-11-08
CVE-2016-7865Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code…Adobe · Adobe Flash Player 23.0.0.205 and earlier, 11.2.202.643 and earlier · 2016-11-08–7.2%2016-11-08
CVE-2018-6064Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a craft…Google · Chrome · 2018-11-14–6.9%2018-11-14
CVE-2016-7398A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and ear…Php · Ext-Http · 2019-09-06–6.8%2019-09-06
CVE-2018-4945Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the curren…Adobe · Adobe Flash Player 29.0.0.171 and earlier versions · 2018-07-09–6.7%2018-07-09
CVE-2017-16379An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09–6.7%2017-12-09
CVE-2017-16367An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…Adobe · Adobe Acrobat Reader 2017.012.20098 and earlier versions, 2017.011.30066 and ea… · 2017-12-09–6.7%2017-12-09
CVE-2016-7979Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initial…Artifex · Ghostscript · 2017-05-23–6.4%2017-05-23
CVE-2015-5219The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a deni…Ntp · Ntp · 2017-07-21–6.1%2017-07-21
CVE-2016-7617An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in…Apple · Mac Os X · 2017-02-20–5.1%2017-02-20
CVE-2017-13855An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The…Apple · Tvos · 2017-12-25–4.8%2017-12-25
CVE-2018-12876Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12–4.8%2018-10-12
CVE-2018-12858Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12–4.8%2018-10-12
CVE-2020-10735A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an int string with 100,0…Python · python · CVSS 6.2 · 2022-09-096.24.5%2022-09-09
CVE-2018-12835Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have a type confusion vulnerability. Successful exploitati…Adobe · Adobe Acrobat and Reader · 2018-10-12–4.5%2018-10-12
CVE-2018-7407An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…Foxitsoftware · Phantompdf · 2018-05-24–3.7%2018-05-24
CVE-2016-8602The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via…Artifex · Ghostscript · 2017-04-14–3.2%2017-04-14
CVE-2018-19477psi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a JBIG2Decode type confusion.Artifex · Ghostscript · 2018-11-23–3.0%2018-11-23
CVE-2018-19476psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion.Artifex · Ghostscript · 2018-11-23–3.0%2018-11-23
CVE-2018-9943This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9942This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9941This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9940This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9939This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9938This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-9937This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17–3.0%2018-05-17
CVE-2018-15910In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or e…Artifex · Ghostscript · 2018-08-27–3.0%2018-08-27
CVE-2018-15909In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpre…Artifex · Ghostscript · 2018-08-27–3.0%2018-08-27

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in