Skip to content
OpenAdvisories

Weakness (CWE)

CWE-628: Function Call with Incorrectly Specified Arguments

Base Draft

The product calls a function, procedure, or routine with arguments that are not correctly specified.

How to prevent it (2 mitigations)

  1. Build and Compilation

    Once found, these issues are easy to fix. Use code inspection tools and relevant compiler features to identify potential violations. Pay special attention to code that is not likely to be exercised heavily during QA.

  2. Architecture and Design

    Make sure your API's are stable before you use them in production code.

Source: MITRE CWE-628

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-116652

    Tanium addressed a business logic error in Threat Response.

    Tanium addressed a business logic error in Threat Response.

    Tanium Threat Response
  • Medium 6.1
    CVE-2026-21503

    iccDEV has Undefined Behavior - Null Pointer Passed to memcpy() in CIccTagSparseMatrixArray

    iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of ICC color management profiles. Prior to version 2.3.1.2, iccDEV has undefined behavior due to a null pointer passed to memcpy() in CIccTagSparseMatri…

    InternationalColorConsortium iccDEV
  • Medium 4.3
    CVE-2025-0325

    A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacke…

    Axis Communications AB AXIS OS
  • Medium 5.7
    CVE-2019-7303 Public exploit

    Snapd seccomp filter TIOCSTI ioctl bypass

    A vulnerability in the seccomp filters of Canonical snapd before version 2.37.4 allows a strict mode snap to insert characters into a terminal on a 64-bit host. The seccomp rules were generated to match 64-bit ioctl(2) commands on a 64-bit platform; however, …

    Canonical snapd snapd snapd Debian Ubuntu