Skip to content
OpenAdvisories

Weakness (CWE)

CWE-628: Function Call with Incorrectly Specified Arguments

Base Draft

The product calls a function, procedure, or routine with arguments that are not correctly specified.

How to prevent it (2 mitigations)

  1. Build and Compilation

    Once found, these issues are easy to fix. Use code inspection tools and relevant compiler features to identify potential violations. Pay special attention to code that is not likely to be exercised heavily during QA.

  2. Architecture and Design

    Make sure your API's are stable before you use them in production code.

Source: MITRE CWE-628

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2026-68907

    libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copyStringToBuffer while…

    MZ Automation libIEC61850
  • High 8.2
    CVE-2026-94636

    Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up

    Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.…

    Apache Software Foundation Apache Thrift thrift thrift Debian Ubuntu
  • High 7.5
    CVE-2026-104430

    Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

    Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP_1 through OP_16 as 20 sigops and causing a consensus divergence. Remote a…

    ZcashFoundation zebra
  • High 7.9
    CVE-2026-43133

    KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

    In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KVM always use vmcb01 for the fields cont…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2026-25634

    iccDEV memcpy-param-overlap in CIccTagMultiProcessElement::Apply()

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to 2.3.1.4, SrcPixel and DestPixel stack buffers overlap in CIccTagMultiProcessElement::Apply() int IccTagMPE.cp…

    InternationalColorConsortium iccDEV
  • High 7.5
    CVE-2019-14844

    A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash…

    MIT krb5