CWE-1037 - Processor Optimization Removal or Modification of Security-critical Code

CWE ID:

CWE-1037

Low

Abstraction:Base
Structure:Simple
Status:Incomplete

Release Date:2018-03-29
Latest Modification Date:2023-06-29

Weakness Name

Processor Optimization Removal or Modification of Security-critical Code

Description

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

Common Consequences

Scope: Integrity

Impact: Bypass Protection Mechanism

Notes: A successful exploitation of this weakness will change the order of an application's execution and will likely be used to bypass specific protection mechanisms. This bypass can be exploited further to potentially read data that should otherwise be unaccessible.