CWE · MITRE source
CWE-14Compiler Removal of Code to Clear Buffers
Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka "dead store removal."
This compiler optimization error occurs when:
Last updated: 04 July 2026 00:28 UTC
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
MITRE ATT&CK techniques this weakness enables
Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing). Drafted by Grok and spot-checked by Claude Opus 4.8.
Direction: ← other covers this;
→ this covers other (F/M/P = full / mostly /
partial).
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2023-1132 | 3.5 | 5.3 | 0.0048 | 2023-05-18 |
CVE-2023-2481 | 3.5 | 5.3 | 0.0048 | 2023-05-18 |
CVE-2023-32098 | 3.5 | 5.3 | 0.0053 | 2023-05-18 |
CVE-2023-32099 | 3.5 | 5.3 | 0.0053 | 2023-05-18 |
CVE-2023-32100 | 3.5 | 5.3 | 0.0048 | 2023-05-18 |
CVE-2025-64646 | 3.5 | 6.2 | 0.0017 | 2026-03-25 |
CVE-2026-48984 | 3.5 | 4.7 | 0.0011 | 2026-06-18 |
CVE-2023-0965 | 1.5 | 3.1 | 0.0048 | 2023-05-18 |
CVE-2023-32096 | 1.5 | 3.1 | 0.0048 | 2023-05-18 |
CVE-2023-32097 | 1.5 | 3.1 | 0.0048 | 2023-05-18 |