Skip to content
OpenAdvisories

Weakness (CWE)

CWE-733: Compiler Optimization Removal or Modification of Security-critical Code

Base Incomplete

The developer builds a security-critical protection mechanism into the software, but the compiler optimizes the program such that the mechanism is removed or modified.

Source: MITRE CWE-733

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 5.4
    CVE-2026-12299

    JIT miscompilation in the DOM: Core & HTML component

    JIT miscompilation in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Medium 4.3
    CVE-2026-10702 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 151.0.3.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  • High 8.8
    CVE-2026-8389 Public exploit

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3.

    Mozilla Firefox thunderbird mozjs38 Browsers Ubuntu
  • High 8.8
    CVE-2026-4698

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu
  • Critical 9.8
    CVE-2025-13024

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 145 and Thunderbird 145.

    Mozilla Firefox Thunderbird mozjs38 Browsers Ubuntu
  • High 7.4
    CVE-2025-20241

    Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service Vulnerability

    A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to c…

    Cisco Cisco NX-OS Software Network devices
  • Low 2.9
    CVE-2024-58262

    curve25519-dalek has timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`

    The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.

    dalek-cryptography curve25519-dalek curve25519-dalek rust-curve25519-dalek Debian crates.io
  • High 7.8
    CVE-2025-52496

    Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may …

    Mbed mbedtls mbedtls mbedtls Debian Ubuntu Alpine
  • High 8.2
    GHSA-hvh4-5qr6-3v7r

    Observable Timing Discrepancy in pypqc

    ### Impact `kyber512`, `kyber768`, and `kyber1024` on Mac OS \(or when compiled with clang\) only: An attacker able to submit many decapsulation requests against a single private key, and to gain timing information about the decapsulation, could recover the p…

    pypqc PyPI
  • High 7.8
    CVE-2020-15294

    Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339)

    Compiler Optimization Removal or Modification of Security-critical Code vulnerability in IntPeParseUnwindData() results in multiple dereferences to the same pointer. If the pointer is located in memory-mapped from the guest space, this may cause a race-condit…

    Bitdefender Hypervisor Introspection