VYPR

CWE-686

Function Call With Incorrect Argument Type

VariantDraft

Description

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

This weakness is most likely to occur in loosely typed languages, or in strongly typed languages in which the types of variable arguments cannot be enforced at compilation time, or where there is implicit casting.

Hierarchy (View 1000)

Parents

Children

none

CVEs mapped to this weakness (5)

  • CVE-2025-14330CriDec 9, 2025
    risk 0.64cvss 9.8epss 0.01

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

  • CVE-2026-8389HigMay 12, 2026
    risk 0.57cvss 8.8epss 0.00

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

  • CVE-2024-32632MedApr 16, 2024
    risk 0.43cvss 6.6epss 0.00

    A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

  • CVE-2026-33783MedApr 9, 2026
    risk 0.42cvss 6.5epss 0.00

    A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, authenticated attacker with low privileges to cause a complete Denial of Service (DoS). If colored SRTE policy tunnels…

  • CVE-2023-5868MedDec 10, 2023
    risk 0.28cvss 4.3epss 0.03

    A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with 'unknown'-type arguments. Handling 'unknown'-type values from string literals without type designation can…