CWE-1038: Insecure Automated Optimizations
Description
The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Low
- Status
- Draft
Common consequences
- Integrity
Alter Execution Logic
The optimizations alter the order of execution resulting in side effects that were not intended by the original developer.
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.