CWE-686— Function Call With Incorrect Argument Type
The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.— MITRE CWE catalog
5 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-686page 1 of 1
- CVE-2023-5868MEDIUMCVSS 4.3EG 4.32023-12-10
A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string lit…
- CVE-2024-32632MEDIUMCVSS 6.6EG 6.62024-04-16
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
- CVE-2025-14330CRITICALCVSS 9.8EG 9.82025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
- CVE-2026-33783MEDIUMCVSS 6.5EG 6.52026-04-09
A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service …
- CVE-2026-8389HIGHCVSS 8.8EG 7.32026-05-12
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.
Map vulnerabilities like CWE-686 to your infrastructure
EchelonGraph correlates every CVE — across CWE-686 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →