CWE-686— Function Call With Incorrect Argument Type
The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.— MITRE CWE catalog
7 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-686page 1 of 1
- CVE-2025-14330CRITICALCVSS 9.8EG 9.82025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
- CVE-2026-112902CRITICALCVSS 9.1EG 9.12026-10-21
Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to TIFFSetField() that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-control…
- CVE-2026-8389HIGHCVSS 8.8EG 8.82026-05-12
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.
- CVE-2026-78422HIGHCVSS 7.3EG 7.32026-08-31
Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit int…
- CVE-2024-32632MEDIUMCVSS 6.6EG 6.62024-04-16
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
- CVE-2026-33783MEDIUMCVSS 6.5EG 6.52026-04-09
A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service …
- CVE-2023-5868MEDIUMCVSS 4.3EG 4.32023-12-10
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string lit…
Map vulnerabilities like CWE-686 to your infrastructure
EchelonGraph correlates every CVE — across CWE-686 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →