CWE-1342

Information Exposure through Microarchitectural State after Transient Execution

Medium

Description

The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution.

Potential Impact

How to Fix

Architecture and Design

Hardware ensures that no illegal data flows from faulting micro-ops exists at the microarchitectural level.

Build and Compilation

Include instructions that explicitly remove traces of unneeded computations from software interactions with microarchitectural elements e.g. lfence, sfence, mfence, clflush.

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-1342 vulnerabilities in your codebase.

Get Security Assessment