Skip to content
OpenAdvisories

Weakness (CWE)

CWE-686: Function Call With Incorrect Argument Type

Variant Draft

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

Source: MITRE CWE-686

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • High 8.3
    CVE-2026-112902

    Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

    Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to  TIFFSetField()  that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata throu…

    python-pillow Pillow pillow pillow Debian Ubuntu PyPI
  • High 7.3
    CVE-2026-78422

    zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i).…

    z-galaxy zbus_polkit zbus_polkit rust-zbus-polkit Debian Ubuntu crates.io
  • High 8.8
    CVE-2026-8389 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  • Medium 6.5
    CVE-2026-33783

    Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes

    A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service (DoS). If colored SR…

    Juniper Networks Junos OS Evolved Network devices
  • Critical 9.8
    CVE-2025-14330

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 6.6
    CVE-2024-32632

    Printf arg type mismatch in ATCMD

    A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

    ASR Falcon/Crane
  • Medium 4.3
    CVE-2023-5868

    Postgresql: memory disclosure in aggregate function calls

    A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type d…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Alpine