CWE-1038—Insecure Automated Optimizations

名称

Insecure Automated Optimizations

描述

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

常见后果

范围：

Integrity

影响：

Alter Execution Logic

注释：

The optimizations alter the order of execution resulting in side effects that were not intended by the original developer.

相关 CWE

• CWE-435Improper Interaction Between Multiple Correctly-Behaving Entities
• CWE-758Reliance on Undefined, Unspecified, or Implementation-Defined Behavior