cve.bz

CWE-733: Compiler Optimization Removal or Modification of Security-critical Code

Filter

The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.

What the weakness is: CWE-733 at MITRE. All weaknesses

Related attack patterns (CAPEC): 5
  • CAPEC-8 Buffer Overflow in an API Call Likelihood: High · Severity: High
  • CAPEC-9 Buffer Overflow in Local Command-Line Utilities Likelihood: High · Severity: High
  • CAPEC-10 Buffer Overflow via Environment Variables Likelihood: High · Severity: High
  • CAPEC-24 Filter Failure through Buffer Overflow Likelihood: High · Severity: High
  • CAPEC-46 Overflow Variables and Tags Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-733, as MITRE names them. Credits.

Ask an AI about CWE-733

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-733: Compiler Optimization Removal or Modification of Security-critical Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/733.html and https://cve.bz/cve/cwe/733?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.4CVE-2026-12299EPSS 0.3%

    JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

  2. 4.3CVE-2026-10702EPSS 0.9%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

  3. 8.8CVE-2026-8389EPSS 0.4%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

  4. 9.8CVE-2026-4698EPSS 0.8%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

  5. 9.8CVE-2025-13024EPSS 0.4%

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

  6. 7.4CVE-2025-20241EPSS 0.3%

    A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, ad…

  7. 5.1CVE-2024-58262EPSS 0.2%

    The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

  8. 7.8CVE-2025-52496EPSS 0.2%

    Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

  9. 7.0CVE-2020-15294EPSS 0.3%

    Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may…