cve.bz

CWE-686: Function Call With Incorrect Argument Type

Filter

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

What the weakness is: CWE-686 at MITRE. All weaknesses

Ask an AI about CWE-686

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-686: Function Call With Incorrect Argument Type and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/686.html and https://cve.bz/cve/cwe/686?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.3CVE-2026-112902EPSS 0.5%

    Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to  TIFFSetField()  that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled …

  2. 7.3CVE-2026-78422EPSS 0.1%

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit int…

  3. 8.8CVE-2026-8389EPSS 0.4%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

  4. 7.1CVE-2026-33783EPSS 0.2%

    A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service …

  5. 9.8CVE-2025-14330EPSS 0.5%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  6. 6.6CVE-2024-32632EPSS 0.2%

    A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

  7. 4.3CVE-2023-5868EPSS 2.8%

    A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string lit…