Advisories · Weakness
CWE-704.
Every Advisory and CVE whose sources give the weakness CWE-704, newest first.
- CVSS 7.8 High
Incorrect type conversion in Google Android
- Google Android
- CWE-704
- CVSS 7.5 High
Incorrect type conversion in OpenPLC_v3
- OpenPLC_v3
- CWE-704
- CVSS 7.5 High
Incorrect type conversion in OpenPLC_v3
- OpenPLC_v3
- CWE-704
- CVSS 7.3 High
Incorrect type conversion in Siemens Tecnomatix Plant Simulation V2302 and others
- Siemens Tecnomatix Plant Simulation V2302
- Siemens Tecnomatix Plant Simulation V2404
- CWE-704
- CVSS 5.3 Medium
OneFlow-Inc.
- CWE-704
- CVSS 6.2 Medium
NULL Pointer Dereference in Graphics
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 7.3 High
Type Confusion in Snapchat Lenscore
- Snapchat Lenscore
- CWE-704
- CVSS 7.5 High
Incorrect type conversion in OFFIS DCMTK
- OFFIS DCMTK
- CWE-704
- CVSS 7.5 High
Incorrect Type Conversion or Cast in Multi-Mode Call Processor
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 8.0 High
ipm: signed to unsigned conversion problem in esp32_ipm_send
- Zephyr
- CWE-704
- CVSS 7.8 High
Incorrect type conversion in Siemens Tecnomatix Plant Simulation V2201 and others
- Siemens Tecnomatix Plant Simulation V2201
- Siemens Tecnomatix Plant Simulation V2302
- CWE-704
- CVSS 7.5 High
Weaviate denial of service vulnerability
- CWE-704
<1.18.6 || >=1.19.0, <1.19.13 || >=1.20.0, <1.20.6 · fixed in 1.18.6, 1.19.13, 1.20.6
GHSA-8697-479h-5mfp · CVE-2023-38976 - CVSS 9.3 CriticalCritical · CVSS 9+
Incorrect Type Conversion or Cast in Core
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 6.7 Medium
Incorrect Type Conversion or Cast in Video
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 6.7 Medium
Incorrect type conversion or cast in Audio
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 8.8 High
Incorrect type conversion in Mozilla Firefox and others
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-704
- CVSS 8.4 High
Incorrect Type Conversion or Cast in Graphics
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 6.7 Medium
Incorrect type conversion or cast in Audio
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 8.4 High
Incorrect type conversion in WLAN
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 6.7 Medium
Incorrect type casting in Display driver
- Qualcomm, Inc. Snapdragon
- CWE-704
- CVSS 4.8 Medium
Invalid char to bool conversion when printing a tensor
- CWE-704
<2.8.4 || >=2.9.0, <2.9.3 || >=2.10.0, <2.10.1 · fixed in 2.8.4, 2.9.3, 2.10.1
GHSA-pf36-r9c6-h97j · CVE-2022-41911 - CVSS 4.8 Medium
`CHECK` fail in `BCast` overflow
- CWE-704
<2.8.4 || >=2.9.0, <2.9.3 || >=2.10.0, <2.10.1 · fixed in 2.8.4, 2.9.3, 2.10.1
GHSA-h246-cgh4-7475 · CVE-2022-41890 - CVSS 5.6 Medium
NagVis CoreLogonMultisite.php checkAuthCookie type conversion
- NagVis
- CWE-704
- CVSS 7.0 High
Incorrect type conversion in Schneider Electric EcoStruxure Operator Terminal Expert and others
- Schneider Electric EcoStruxure Operator Terminal Expert
- Schneider Electric Pro-face BLUE
- CWE-704
- CVSS 7.1 High
com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution
- CWE-704
<2.1.0.8 · fixed in 2.1.0.8
GHSA-jc69-hjw2-fm86 · CVE-2022-41828 - CVSS 8.1 High
Duplicate Advisory: AWS Redshift JDBC Driver fails to validate class type during object instantiation
- CWE-704
<2.1.0.8 · fixed in 2.1.0.8
GHSA-5c6q-f783-h888 - CVSS 6.2 Medium
Incorrect type conversion in python
- python
- CWE-704
- CVSS 7.5 High
pg-native and libpq vulnerable to uncontrolled resource consumption
- Denial of service
- CWE-704
<1.8.10 · fixed in 1.8.10
GHSA-j32j-2hxv-rqf7 · CVE-2022-25852 -
Incorrect type conversion in Swift Project Swift Corelib-Foundation
- Swift Project Swift Corelib-Foundation
- CWE-241
- CWE-351
- CVSS 8.8 High
Incorrect Privilege Assignment in Jenkins Script Security Plugin
- Privilege escalation
- CWE-704
<1.62 · fixed in 1.62
GHSA-p56j-x44h-g66j · CVE-2019-10355 - CVSS 9.8 CriticalCritical · CVSS 9+
Improper Input Validation in IpMatcher
- CWE-20
- CWE-704
<1.0.4.2 · fixed in 1.0.4.2
GHSA-qj93-37f5-mr29 · CVE-2021-33318 - CVSS 7.1 High
Improperly checked metadata on tools/armour itemstacks received from the client
- CWE-20
- CWE-704
<4.2.4 · fixed in 4.2.4
GHSA-46c5-pfj8-fv65 · CVE-2022-51013 -
Incorrect type conversion in isync
- isync
- CWE-704
- CVSS 4.0 Medium
Exposure of Sensitive Information to an Unauthorized Actor in nanoid
- Information disclosure
- CWE-704
>=3.0.0, <3.1.31 · fixed in 3.1.31
GHSA-qrpm-p2h7-hrv2 · CVE-2021-23566 - CVSS 7.5 High
Incorrect type conversion in Huawei HarmonyOS
- Huawei HarmonyOS
- CWE-704
- CVSS 8.8 High
Cachet vulnerable to forced reinstall
- CWE-704
<2.5.1 · fixed in 2.5.1
GHSA-r67m-m8c7-jp83 · CVE-2021-39173 - CVSS 9.8 CriticalCritical · CVSS 9+
Unaligned memory access in rand_core
- CWE-704
<0.3.1 || >=0.4.0, <0.4.2 · fixed in 0.3.1, 0.4.2
GHSA-mmc9-pwm7-qj5w · CVE-2020-25576 - CVSS 9.8 CriticalCritical · CVSS 9+
Incorrect cast in anymap
- CWE-681
- CWE-704
<=0.12.1 · no fixed version yet
GHSA-hc92-9h3m-c39j · CVE-2021-38187 - CVSS 9.8 CriticalCritical · CVSS 9+
Unsoundness in bigint
- CWE-704
<=4.4.3 · no fixed version yet
GHSA-wgx2-6432-j3fw · CVE-2020-35880 - CVSS 7.5 High
os_str_bytes relies on undefined behavior of `char::from_u32_unchecked`
- CWE-704
<2.0.0 · fixed in 2.0.0
GHSA-q948-x8rf-888m · CVE-2020-35865 - CVSS 7.5 High
Dangling reference in flatbuffers
- CWE-704
>=0.4.0, <2.0.0 · fixed in 2.0.0
GHSA-c9h5-hf8r-m97x · CVE-2020-35864 - CVSS 9.8 CriticalCritical · CVSS 9+
Unsound casting in flatbuffers
- CWE-704
>=0.4.0, <0.6.1 · fixed in 0.6.1
GHSA-gx73-2498-r55c · CVE-2019-25004 - CVSS 9.1 CriticalCritical · CVSS 9+
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially r…
- CWE-704
- CVSS 8.8 High
Incorrect type conversion in Gallagher Command Centre
- Gallagher Command Centre
- CWE-704
- CVSS 8.1 High
Incorrect type conversion in Accusoft
- Accusoft
- CWE-704
- CVSS 7.8 High
snd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info->owner line, which later affects a private_size*count multiplication for unspecified "interesting side effe…
- CWE-704
- CVSS 6.8 Medium
Cisco Adaptive Security Appliance Software Secure Copy Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-704
-
Incorrect type conversion in Omron CX-Supervisor
- Omron CX-Supervisor
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
Incorrect type conversion in Foxit Reader
- Foxit Reader
- CWE-704
-
crack does not properly restrict casts of string values
- Other injection
- CWE-704
<0.3.2 · fixed in 0.3.2
GHSA-m7fq-cf8q-35q7 · CVE-2013-1800 -
Devise does not properly perform type conversion when performing database queries
- CWE-704
>=1.5.0, <1.5.4 || >=2.0.0, <2.0.5 || >=2.1.0, <2.1.3 || >=2.2.0, <2.2.3 · fixed in 1.5.4, 2.0.5, 2.1.3, 2.2.3
GHSA-jxhw-mg8m-2pj8 · CVE-2013-0233 -
extlib does not properly restrict casts of string values
- CWE-704
<0.9.16 · fixed in 0.9.16
GHSA-9h36-4jf2-hx53 · CVE-2013-1802