CWEweakness

CWE-687 Function Call With Incorrectly Specified Argument Value

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Draft
Languages
Not Language-Specific
CWE version
5.0

Description

The product calls a function, procedure, or routine, but the caller specifies an argument that contains the wrong value, which may lead to resultant weaknesses.

Common consequences

• Other: Quality Degradation

Detection methods

• Manual Static Analysis: This might require an understanding of intended program behavior or design to determine whether the value is incorrect.

Related

Child of · CWE (1)

  • CWE-628 Function Call with Incorrectly Specified Arguments weakness

Referenced by CVE · weakness (3)

  • CVE-2025-22620 gitoxide is an implementation of git written in Rust. vulnerability
  • CVE-2024-49603 Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. vulnerability
  • CVE-2024-36985 In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles… vulnerability

Referenced by CWE · child of (1)

  • CWE-560 Use of umask() with chmod-style Argument weakness