CWE-688: Function Call With Incorrect Variable or Reference as Argument
Filter
The product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.
What the weakness is: CWE-688 at MITRE. All weaknesses
Ask an AI about CWE-688
Show the prompt
Explain CWE-688: Function Call With Incorrect Variable or Reference as Argument and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/688.html and https://cve.bz/cve/cwe/688?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.1CVE-2026-101959EPSS 0.2%
A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via spe…
- 8.4CVE-2026-76878EPSS 0.5%
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the all_projects query parameter is set to false. The API checks for the presence of the all_projects key rather than its value; a true value enforces the ad…
- 4.7CVE-2026-12311EPSS 0.2%
Information disclosure, sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- 8.8CVE-2026-33549EPSS 0.2%
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.
- 5.5CVE-2021-33713EPSS 0.2%
A vulnerability has been identified in JT Utilities (All versions < V13.0.2.0). When parsing specially crafted JT files, a hash function is called with an incorrect argument leading the application to crash. An attacker could leverage this…