CWE-686: Function Call With Incorrect Argument Type

Variant

The product calls a function, procedure, or routine, but the caller specifies an argument that is the wrong data type, which may lead to resultant weaknesses.

This weakness is most likely to occur in loosely typed languages, or in strongly typed languages in which the types of variable arguments cannot be enforced at compilation time, or where there is implicit casting.

Consequences

Other: Quality Degradation

Recent advisories

GHSA-xvh5-g6gv-559v — Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags

All advisories for CWE-686

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor