gpt-5.2-codex vs gemini-3.1-pro-preview
Both models ran the same corpus under the same verifier — codex and gemini31 respectively. The harness differs where the names differ, and that is part of what separates them.
Their confidence intervals overlap. On this corpus the difference of 9.5 points is not resolved — treat these two as tied.
Where they differ
| Weakness | gpt-5.2-codex | gemini-3.1-pro-preview | Difference |
|---|---|---|---|
| CWE-125Out-of-bounds Read | 56.0% | 66.2% | -10.2 |
| CWE-787Out-of-bounds Write | 64.7% | 62.5% | +2.2 |
| CWE-416Use After Free | 15.4% | 33.3% | -17.9 |
| CWE-908Use of Uninitialized Resource | 22.2% | 0.0% | +22.2 |
| CWE-415Double Free | 33.3% | 100.0% | -66.7 |
| CWE-843Access of Resource Using Incompatible Type ('Type Confusion') | 50.0% | 50.0% | 0.0 |
| CWE-476NULL Pointer Dereference | 0.0% | 50.0% | -50.0 |
| CWE-1284Improper Validation of Specified Quantity in Input | 50.0% | 100.0% | -50.0 |
| CWE-475 | 100.0% | 100.0% | 0.0 |
| CWE-562 | 0.0% | 0.0% | 0.0 |
Per-class samples are small; a difference here is a hint about where to look, not a result. The corpus-level intervals above are the honest comparison.
Corpus cve-bench-136 · run February 2026 · How we test
See the benchmark →