There's plenty of undefined behaviour at that level, just look at Spectre and Meltdown vulnerabilities for example.