CWE-733: Compiler Optimization Removal or Modification of Security-critical Code
The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.
A kind of CWE-1038 Insecure Automated Optimizations.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 more JIT miscompilation in the DOM: Core & HTML component 5.4 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more JIT miscompilation in the JavaScript Engine: JIT component 4.3 Medium
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more JIT miscompilation in the JavaScript Engine: JIT component 8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 more JIT miscompilation in the JavaScript Engine: JIT component 9.8 Critical
- mozilla firefox, thunderbird +1 more JIT miscompilation in the JavaScript Engine: JIT component 9.8 Critical
- cisco nx-os software Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability 7.4 High
- arm mbed tls, mbed mbedtls +1 more Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... 7.8 High
- dalek curve25519-dalek curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub` 2.9 Low
-
pypqcPyPI Observable Timing Discrepancy in pypqc 7.8 High - bitdefender hypervisor introspection Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339) 7.8 High