Skip to content
OpenAdvisories

Weakness (CWE)

CWE-686: Function Call With Incorrect Argument Type

Variant Draft

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

Source: MITRE CWE-686

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.3
    CVE-2026-112902

    Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

    Pillow is a Python imaging library. In versions through 12.3.0, the libtiff TIFF encoder can pass arguments to  TIFFSetField()  that do not match libtiff’s definition of the corresponding tag. When an application saves attacker-controlled image metadata throu…

    python-pillow Pillow pillow pillow Debian Ubuntu PyPI
  • High 7.3
    CVE-2026-78422

    zbus_polkit: polkit authorization bypass via PID reuse due to incorrect D-Bus type for the subject UID

    Subject::new_for_owner() in the zbus_polkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer (D-Bus type u), whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer (D-Bus type i).…

    z-galaxy zbus_polkit rust-zbus-polkit rust-zbus-polkit Debian Ubuntu crates.io
  • High 8.8
    CVE-2026-8389 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu