CyberSecBulletin

Incorrect Type Conversion or Cast

CWE-704

The product does not correctly convert an object, resource, or structure from one type to a different type.

We track 43 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.

Latest Incorrect Type Conversion or Cast vulnerabilities

  • 7.5 High severity

    pg-native: Incorrect Type Conversion or Cast

    CVE-2022-25852Pg-nativeEPSS 1.4%

    All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:** pg-native is a mere

  • 7.8 High severity

    ImageMagick: Incorrect Type Conversion or Cast

    CVE-2022-32547ImageMagickEPSS 1.41%

    In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes

  • 7.5 High severity

    Swift Corelib-Foundation: Incorrect Type Conversion or Cast

    CVE-2022-1642Swift Project

    A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mecha