Quite a problem, especially when considering cryptographic implementations. Here's am article from 2016:

https://dl.acm.org/doi/10.1145/2851486