Vulnerabilities (CVE)

Filtered by CWE-704
Total 228 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-13888 1 Apple 1 Iphone Os 2024-11-21 5.0 MEDIUM 7.5 HIGH
In iOS before 11.2, a type confusion issue was addressed with improved memory handling.
CVE-2016-7398 1 Php 1 Ext-http 2024-11-21 7.5 HIGH 9.8 CRITICAL
A type confusion vulnerability in the merge_param() function of php_http_params.c in PHP's pecl-http extension 3.1.0beta2 (PHP 7) and earlier as well as 2.6.0beta2 (PHP 5) and earlier allows attackers to crash PHP and possibly execute arbitrary code via crafted HTTP requests.
CVE-2014-9627 1 Videolan 1 Vlc Media Player 2024-11-21 6.8 MEDIUM 7.8 HIGH
The MP4_ReadBox_String function in modules/demux/mp4/libmp4.c in VideoLAN VLC media player before 2.1.6 performs an incorrect cast operation from a 64-bit integer to a 32-bit integer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large box size.
CVE-2011-2337 1 Google 1 Blink 2024-11-21 7.5 HIGH 9.8 CRITICAL
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
CVE-2011-1805 1 Google 1 Chrome 2024-11-21 6.8 MEDIUM 8.8 HIGH
Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2011-1460 1 Google 1 Blink 2024-11-21 7.5 HIGH 9.8 CRITICAL
WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
CVE-2024-39589 1 Openplcproject 1 Openplc V3 Firmware 2024-09-26 N/A 7.5 HIGH
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Read_Reply` function
CVE-2024-39590 1 Openplcproject 1 Openplc V3 Firmware 2024-09-26 N/A 7.5 HIGH
Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Write_Reply` function