cve.bz

CWE-628: Function Call with Incorrectly Specified Arguments

Filter

The product calls a function, procedure, or routine with arguments that are not correctly specified.

What the weakness is: CWE-628 at MITRE. OWASP Top 10: A06:2025 Insecure Design

Ask an AI about CWE-628

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-628: Function Call with Incorrectly Specified Arguments and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/628.html and https://cve.bz/cve/cwe/628?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.3CVE-2026-116652EPSS 0.2%

    Tanium addressed a business logic error in Threat Response.

  2. 8.2CVE-2026-68907EPSS 0.4%

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copy…

  3. 8.2CVE-2026-94636EPSS 0.3%

    Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apac…

  4. 8.7CVE-2026-104430EPSS 0.4%

    Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus …

  5. 9.8CVE-2026-19349EPSS 0.8%

    Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. …

  6. 7.9CVE-2026-43133EPSS 0.1%

    In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb…

  7. 7.8CVE-2026-25634EPSS 0.2%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Appl…

  8. 5.5CVE-2026-21503EPSS 0.2%

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy() i…

  9. 4.3CVE-2025-0325EPSS 0.4%

    A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.

  10. 7.5CVE-2019-14844EPSS 4.4%

    A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote unauthenticated user could use this flaw to crash the KDC.

  11. 7.5CVE-2019-7303ExploitEPSS 3.7%

    A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit…