CVE-2023-23557
https://notcve.org/view.php?id=CVE-2023-23557
An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious attacker to execute arbitrary code via type confusion. • https://github.com/facebook/hermes/commit/a00d237346894c6067a594983be6634f4168c9ad https://www.facebook.com/security/advisories/cve-2023-23557 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2023-2724 – Chrome Internal JavaScript Object Access Via Origin Trials
https://notcve.org/view.php?id=CVE-2023-2724
Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. • http://packetstormsecurity.com/files/173131/Chrome-Internal-JavaScript-Object-Access-Via-Origin-Trials.html https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_16.html https://crbug.com/1433211 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI https://security.gentoo.org/glsa/202309-17 https://security.gentoo • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2023-20673
https://notcve.org/view.php?id=CVE-2023-20673
In vcu, there is a possible memory corruption due to type confusion. • https://corp.mediatek.com/product-security-bulletin/May-2023 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2023-24944 – Windows Bluetooth Driver Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-24944
Windows Bluetooth Driver Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24944 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVE-2023-24823 – RIOT-OS vulnerable to Packet Type Confusion during IPHC send
https://notcve.org/view.php?id=CVE-2023-24823
Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a type confusion between IPv6 extension headers and a UDP header. ... The type confusion manifests in an out of bounds write in the packet buffer. • https://github.com/RIOT-OS/RIOT/pull/18817/commits/4a081f86616cb5c9dd0b5d7b286da03285d1652a https://github.com/RIOT-OS/RIOT/pull/18820/commits/dafc397fdc3655aeb5c7b9963a43f1604c6a2062 https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-jwmv-47p2-hgq2 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •