CWE-474Use of Function with Inconsistent Implementations

Abstraction: Base · CVEs in our corpus: 14

The code uses a function that has inconsistent implementations across operating systems and versions.

The use of inconsistent implementations can cause changes in behavior when the code is ported or built under a different environment than the programmer expects, which can lead to security problems in some cases. The implementation of many functions varies by platform, and at times, even by different versions of the same platform. Implementation differences can include:

Last updated: 14 October 2026 20:41 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools
SA-11 Developer Testing and Evaluation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted

These are model PROPOSALS, not graded mappings. They come from controls_to_cwe_proposals, which carries no grade field at all; across the CWE pages 1,540 of 1,722 such associations (89%) have never been graded by anything. The heading said “address” until 2026-09-29, which asserted a relationship the data does not carry. Graded cross-walks are on the framework map, not here.

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2024-5836`	6.6	8.8	0.0050	2024-06-11
`CVE-2026-11102`	6.5	8.8	0.0037	2026-06-04
`CVE-2026-0902`	6.4	8.8	0.0029	2026-01-20
`CVE-2026-24010`	6.1	8.0	0.0048	2026-01-22
`CVE-2024-1694`	5.6	7.8	0.0015	2024-06-07
`CVE-2026-25960`	5.6	7.1	0.0075	2026-03-09
`CVE-2024-5839`	5.1	6.5	0.0049	2024-06-11
`CVE-2026-50719`	5.0	6.8	0.0015	2026-08-19
`CVE-2026-11097`	4.9	6.5	0.0023	2026-06-04
`CVE-2021-0294`	4.6	5.3	0.0095	2021-07-15
`CVE-2024-1672`	4.6	5.4	0.0088	2024-02-21
`CVE-2024-2628`	3.8	4.3	0.0065	2024-03-20
`CVE-2024-7001`	3.7	4.3	0.0049	2024-08-06
`CVE-2026-39894`	2.5	2.9	0.0014	2026-06-24