이름: Insecure Automated Optimizations

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

일반 정보

취약점 도입 방식

Architecture and Design : Optimizations built into the design of a product can have unintended consequences during execution.

적용 가능한 플랫폼

언어

클래스: Not Language-Specific (Undetermined)

일반적인 결과

범위	영향	가능성
Integrity	Alter Execution Logic 참고: The optimizations alter the order of execution resulting in side effects that were not intended by the original developer.

관찰된 예시

참고 자료	설명
CVE-2017-5715	Intel, ARM, and AMD processor optimizations related to speculative execution and branch prediction cause access control checks to be bypassed when placing data into the cache. Often known as "Spectre".
CVE-2008-1685	C compiler optimization, as allowed by specifications, removes code that is used to perform checks to detect integer overflows.

취약점 매핑 메모

근거 : This CWE entry is a Class and might have Base-level children that would be more appropriate
댓글 : Examine children of this entry to see if there is a better fit

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2018-03-07 +00:00	2018-03-29 +00:00	3.1

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2020-02-24 +00:00	updated Relationships
CWE Content Team	MITRE	2023-04-27 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-10-26 +00:00	updated Observed_Examples
CWE Content Team	MITRE	2025-12-11 +00:00	updated Demonstrative_Examples
CWE Content Team	MITRE	2026-10-28 +00:00	updated Dimensions

CWE-1038 상세 정보

CWE-1038