CWE-14: Compiler Removal of Code to Clear Buffers
Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka "dead store removal."
CWE Reference
CWE for compiled undetermined
Browse cwe for compiled undetermined with official CWE context and Glexia analysis.
Release 4.20listing
Search And Filters
Browse CWE records
Showing 5 of 5 CWE records.
CWE-733: Compiler Optimization Removal or Modification of Security-critical Code
The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.
CWE-1127: Compilation with Insufficient Warnings or Errors
The code is compiled without sufficient warnings enabled, which may prevent the detection of subtle bugs or quality issues.
CWE-1269: Product Released in Non-Release Configuration
The product released to market is released in pre-production or manufacturing configuration.
CWE-1273: Device Unlock Credential Sharing
The credentials necessary for unlocking a device are shared across multiple parties and may expose sensitive information.