CWE-843: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

CWE-843: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Description Extended Description

If exploited, CWE-843 (CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')) it can compromise Read Memory, Modify Memory, Execute Unauthorized Code or Commands, DoS: Crash, Exit and or Restart, leading to outcomes such as Scope: Availability, Integrity, Confidentiality When a memory buffer is accessed using the wrong type, it could read or write memory out of the bounds of the buffer, if the allocated buffer is smaller than the type that the code is attempting to access and leading to a crash and possibly code execution..

CWE-843 commonly affects Languages. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.

A CWE (Common Weakness Enumeration) like CWE-843 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.