CWE-14
Compiler Removal of Code to Clear Buffers
Sensitive memory is cleared according to the source code, but compiler optimizations leave the memory untouched when it is not read from again, aka dead store removal.
Impactr finds and proves whether CWE-14 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.