CWE-1037—Processor Optimization Removal or Modification of Security-critical Code

Weakness Name

Processor Optimization Removal or Modification of Security-critical Code

Description

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

Common Consequences

Scope:

Integrity

Impact:

Bypass Protection Mechanism

Notes:

A successful exploitation of this weakness will change the order of an application's execution and will likely be used to bypass specific protection mechanisms. This bypass can be exploited further to potentially read data that should otherwise be unaccessible.

Related Weaknesses

• CWE-1038Insecure Automated OptimizationsLow