cve.bz

CWE-474: Use of Function with Inconsistent Implementations

Filter

The code uses a function that has inconsistent implementations across operating systems and versions.

What the weakness is: CWE-474 at MITRE. All weaknesses

Ask an AI about CWE-474

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-474: Use of Function with Inconsistent Implementations and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/474.html and https://cve.bz/cve/cwe/474?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.8CVE-2026-50719EPSS 0.1%

    The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table pars…

  2. 2.5CVE-2026-39894EPSS 0.1%

    Cacti is an open source performance and fault management framework. In versions 1.2.30 and below, the locale-dependent decimal formatting in rrdtool_function_update() can corrupt RRDtool metric values. The rrdtool_function_update() functio…

  3. 8.8CVE-2026-11102EPSS 0.4%

    Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: Medium)

  4. 6.5CVE-2026-11097EPSS 0.2%

    Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

  5. 9.8CVE-2026-25960EPSS 0.6%

    vLLM is an inference and serving engine for large language models (LLMs). The SSRF protection fix for CVE-2026-24779 add in 0.15.1 can be bypassed in the load_from_url_async method due to inconsistent URL parsing behavior between the valid…

  6. 8.0CVE-2026-24010EPSS 0.5%

    Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a mali…

  7. 8.8CVE-2026-0902EPSS 0.3%

    Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

  8. 4.3CVE-2024-7001EPSS 0.5%

    Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medi…

  9. 6.5CVE-2024-5839EPSS 0.5%

    Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

  10. 8.8CVE-2024-5836EPSS 0.5%

    Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severit…

  11. 7.8CVE-2024-1694EPSS 0.2%

    Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control via a malicious file. (Chromium security severity: High)

  12. 4.3CVE-2024-2628EPSS 0.7%

    Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)

  13. 5.4CVE-2024-1672EPSS 0.9%

    Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

  14. 5.3CVE-2021-0294EPSS 0.9%

    A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configure…