| CWE-119 | Memory Buffer Bounds | 12,236 | 50 | 5 |
| CWE-787 | Out-of-bounds Write | 11,340 | 129 | 2 |
| CWE-125 | Out-of-bounds Read | 10,111 | 18 | 5 |
| CWE-416 | Use After Free | 9,607 | 107 | 2 |
| CWE-476 | NULL Pointer Dereference | 5,716 | 1 | 2 |
| CWE-120 | Classic Buffer Overflow | 4,419 | 23 | 2 |
| CWE-121 | Stack-based Buffer Overflow | 4,147 | 20 | 0 |
| CWE-122 | Heap-based Buffer Overflow | 3,923 | 20 | 0 |
| CWE-190 | Integer Overflow | 3,565 | 22 | 5 |
| CWE-843 | Type Confusion | 986 | 42 | 0 |
| CWE-415 | Double Free | 933 | 5 | 0 |
| CWE-908 | Use of Uninitialized Resource | 931 | 2 | 1 |
| CWE-129 | Improper Validation of Array Index | 648 | – | – |
| CWE-126 | Buffer Over-read | 592 | – | – |
| CWE-191 | Integer Underflow (Wrap or Wraparound) | 592 | – | – |
| CWE-134 | Use of Externally-Controlled Format String | 417 | – | – |
| CWE-665 | Improper Initialization | 336 | – | – |
| CWE-822 | Untrusted Pointer Dereference | 333 | – | – |
| CWE-824 | Access of Uninitialized Pointer | 285 | – | – |
| CWE-457 | Use of Uninitialized Variable | 284 | – | – |
| CWE-193 | Off-by-one Error | 228 | – | – |
| CWE-704 | Incorrect Type Conversion or Cast | 202 | – | – |
| CWE-131 | Incorrect Calculation of Buffer Size | 201 | – | – |
| CWE-788 | Access of Memory Location After End of Buffer | 144 | – | – |
| CWE-130 | Improper Handling of Length Parameter Inconsistency | 128 | – | – |
| CWE-763 | Release of Invalid Pointer or Reference | 116 | – | – |
| CWE-680 | Integer Overflow to Buffer Overflow | 113 | – | – |
| CWE-681 | Incorrect Conversion between Numeric Types | 107 | – | – |
| CWE-823 | Use of Out-of-range Pointer Offset | 102 | – | – |
| CWE-197 | Numeric Truncation Error | 94 | – | – |
| CWE-909 | Missing Initialization of Resource | 81 | – | – |
| CWE-123 | Write-what-where Condition | 65 | – | – |
| CWE-825 | Expired Pointer Dereference | 59 | – | – |
| CWE-805 | Buffer Access with Incorrect Length Value | 56 | – | – |
| CWE-170 | Improper Null Termination | 52 | – | – |
| CWE-124 | Buffer Underwrite | 47 | – | – |
| CWE-195 | Signed to Unsigned Conversion Error | 30 | – | – |
| CWE-590 | Free of Memory not on the Heap | 24 | – | – |
| CWE-118 | Incorrect Access of Indexable Resource | 23 | – | – |
| CWE-244 | Improper Clearing of Heap Memory Before Release | 22 | – | – |
| CWE-911 | Improper Update of Reference Count | 18 | – | – |
| CWE-762 | Mismatched Memory Management Routines | 14 | – | – |
| CWE-127 | Buffer Under-read | 13 | – | – |
| CWE-242 | Use of Inherently Dangerous Function | 11 | – | – |
| CWE-1419 | Incorrect Initialization of Resource | 11 | – | – |
| CWE-196 | Unsigned to Signed Conversion Error | 9 | – | – |
| CWE-456 | Missing Initialization of a Variable | 9 | – | – |
| CWE-466 | Return of Pointer Value Outside of Expected Range | 8 | – | – |
| CWE-562 | Return of Stack Variable Address | 8 | – | – |
| CWE-786 | Access of Memory Location Before Start of Buffer | 8 | – | – |
| CWE-826 | Premature Release of Resource During Expected Lifetime | 8 | – | – |
| CWE-192 | Integer Coercion Error | 7 | – | – |
| CWE-128 | Wrap-around Error | 5 | – | – |
| CWE-194 | Unexpected Sign Extension | 5 | – | – |
| CWE-468 | Incorrect Pointer Scaling | 4 | – | – |
| CWE-467 | Use of sizeof() on a Pointer Type | 3 | – | – |
| CWE-188 | Reliance on Data/Memory Layout | 2 | – | – |
| CWE-198 | Use of Incorrect Byte Ordering | 2 | – | – |
| CWE-465 | Pointer Issues | 2 | – | – |
| CWE-588 | Attempt to Access Child of a Non-structure Pointer | 2 | – | – |
| CWE-761 | Free of Pointer not at Start of Buffer | 2 | – | – |
| CWE-910 | Use of Expired File Descriptor | 2 | – | – |
| CWE-1221 | Incorrect Register Defaults or Module Parameters | 2 | – | – |
| CWE-1389 | Incorrect Parsing of Numbers with Different Radices | 2 | – | – |
| CWE-469 | Use of Pointer Subtraction to Determine Size | 1 | – | – |
| CWE-1051 | Initialization with Hard-Coded Network Resource Configuration Data | 1 | – | – |