CWE-1038 详情

CWE-1038

Insecure Automated Optimizations
2018-03-29
00h00 +00:00
低危
Draft
2026-10-28
00h00 +00:00
指定 CWE 通知
随时了解指定 CWE 的变更。
管理通知

名称: Insecure Automated Optimizations

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

基本信息

引入方式

Architecture and Design : Optimizations built into the design of a product can have unintended consequences during execution.

适用平台

编程语言

类: Not Language-Specific (Undetermined)

常见后果

影响范围 影响 可能性
IntegrityAlter Execution Logic

注意: The optimizations alter the order of execution resulting in side effects that were not intended by the original developer.

观察示例

参考资料 描述

CVE-2017-5715

Intel, ARM, and AMD processor optimizations related to speculative execution and branch prediction cause access control checks to be bypassed when placing data into the cache. Often known as "Spectre".

CVE-2008-1685

C compiler optimization, as allowed by specifications, removes code that is used to perform checks to detect integer overflows.

漏洞映射说明

依据 : This CWE entry is a Class and might have Base-level children that would be more appropriate
备注 : Examine children of this entry to see if there is a better fit

提交记录

名称 组织 日期 发布日期 Version
CWE Content Team MITRE 2018-03-07 +00:00 2018-03-29 +00:00 3.1

修改记录

名称 组织 日期 备注
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-10-26 +00:00 updated Observed_Examples
CWE Content Team MITRE 2025-12-11 +00:00 updated Demonstrative_Examples
CWE Content Team MITRE 2026-10-28 +00:00 updated Dimensions