CWE-474Use of Function with Inconsistent Implementations

Abstraction: Base · CVEs in our corpus: 13

The code uses a function that has inconsistent implementations across operating systems and versions.

The use of inconsistent implementations can cause changes in behavior when the code is ported or built under a different environment than the programmer expects, which can lead to security problems in some cases. The implementation of many functions varies by platform, and at times, even by different versions of the same platform. Implementation differences can include:

Last updated: 21 August 2026 14:15 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools
SA-11 Developer Testing and Evaluation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2024-5836`	6.6	8.8	0.0050	2024-06-11
`CVE-2026-11102`	6.5	8.8	0.0039	2026-06-04
`CVE-2026-0902`	6.4	8.8	0.0026	2026-01-20
`CVE-2026-24010`	6.0	8.0	0.0043	2026-01-22
`CVE-2024-1694`	5.6	7.8	0.0015	2024-06-07
`CVE-2026-25960`	5.5	7.1	0.0054	2026-03-09
`CVE-2024-5839`	5.1	6.5	0.0049	2024-06-11
`CVE-2026-11097`	4.9	6.5	0.0023	2026-06-04
`CVE-2021-0294`	4.6	5.3	0.0095	2021-07-15
`CVE-2024-1672`	4.6	5.4	0.0089	2024-02-21
`CVE-2024-2628`	3.8	4.3	0.0066	2024-03-20
`CVE-2024-7001`	3.7	4.3	0.0049	2024-08-06
`CVE-2026-39894`	2.5	2.9	0.0015	2026-06-24