CWE-14: Compiler Removal of Code to Clear Buffers

Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka "dead store removal."

A kind of CWE-733 Compiler Optimization Removal or Modification of Security-critical Code.

From the CWE List. © The MITRE Corporation.

Newest

• mcdope pam usb pam_usb: xfree() does not call explicit_bzero — sensitive cryptographic material may linger in freed heap CVE-2026-48984 4.7 MediumJune 18, 2026
• ibm concert Multiple Vulnerabilities in IBM Concert Software CVE-2025-64646 6.2 MediumMarch 25, 2026
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32100 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32099 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32098 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32097 3.1 LowMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-32096 3.1 LowMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-2481 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-1132 5.3 MediumMay 18, 2023
• silabs.com gecko platform, silabs gecko software development kit +1 more Key duplication in GSDK CVE-2023-0965 3.1 LowMay 18, 2023