CVE-2024-31071 – Arkcompiler Ets Runtime has a type confusion vulnerability
https://notcve.org/view.php?id=CVE-2024-31071
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion. En OpenHarmony v4.0.0 y versiones anteriores permiten que un atacante local provoque que las aplicaciones fallen debido a confusión de tipos. • https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-07.md • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2024-20078
https://notcve.org/view.php?id=CVE-2024-20078
In venc, there is a possible out of bounds write due to type confusion. ... En venc, existe una posible escritura fuera de los límites debido a una confusión de tipos. • https://corp.mediatek.com/product-security-bulletin/July-2024 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2024-6100
https://notcve.org/view.php?id=CVE-2024-6100
Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Type Confusion en V8 en Google Chrome anterior a 126.0.6478.114 permitía a un atacante remoto ejecutar código arbitrario a través de una página HTML manipulada. • https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html https://issues.chromium.org/issues/344608204 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2024-32922
https://notcve.org/view.php?id=CVE-2024-32922
In gpu_pm_power_on_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not needed for exploitation. En gpu_pm_power_on_top_nolock de pixel_gpu_power.c, existe un posible compromiso de la memoria protegida debido a un error lógico en el código. Esto podría llevar a una escalada local de privilegios a TEE sin necesidad de privilegios de ejecución adicionales. • https://source.android.com/security/bulletin/pixel/2024-06-01 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2024-32919
https://notcve.org/view.php?id=CVE-2024-32919
In lwis_add_completion_fence of lwis_fence.c, there is a possible escalation of privilege due to type confusion. ... En lwis_add_completion_fence de lwis_fence.c, existe una posible escalada de privilegios debido a una confusión de tipos. • https://source.android.com/security/bulletin/pixel/2024-06-01 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •