CWEweakness
CWE-686 Function Call With Incorrect Argument Type
- Abstraction
- Variant
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.
Common consequences
• Other: Quality Degradation
Detection methods
• Other: Because this function call often produces
incorrect behavior, it will usually be detected during
testing or normal operation of the product.
Related
Child of · CWE (1)
- CWE-628 Function Call with Incorrectly Specified Arguments weakness
Referenced by CVE · weakness (6)
- CVE-2026-78422 Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer… vulnerability
- CVE-2026-8389 JIT miscompilation in the JavaScript Engine: JIT component. vulnerability
- CVE-2026-33783 A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series… vulnerability
- CVE-2025-14330 JIT miscompilation in the JavaScript Engine: JIT component. vulnerability
- CVE-2024-32632 A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access vulnerability
- CVE-2023-5868 A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain… vulnerability