cve.bz

CWE-1038: Insecure Automated Optimizations

Filter

The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.

What the weakness is: CWE-1038 at MITRE. All weaknesses

Ask an AI about CWE-1038

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1038: Insecure Automated Optimizations and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1038.html and https://cve.bz/cve/cwe/1038?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.1CVE-2025-48877EPSS 0.4%

    Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branch, Codepen is present in the default `allowed_…

  2. 4.9CVE-2023-52971EPSS 0.5%

    MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

  3. 4.9CVE-2023-52970EPSS 0.5%

    MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

  4. 4.9CVE-2023-52969EPSS 0.5%

    MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.

  5. 5.1CVE-2022-31220EPSS 0.2%

    Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated administrator user could potentially exploit this vulnerability in order to change the state of the system or cause unexpected failures.

  6. 7.8CVE-2022-26861EPSS 0.2%

    Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.