composer-1.5 vs claude-opus-4-6
Both models ran the same corpus under the same verifier — cursor and opencode respectively. The harness differs where the names differ, and that is part of what separates them.
Their confidence intervals overlap. On this corpus the difference of 2.3 points is not resolved — treat these two as tied.
Where they differ
| Weakness | composer-1.5 | claude-opus-4-6 | Difference |
|---|---|---|---|
| CWE-125Out-of-bounds Read | 53.4% | 53.3% | +0.1 |
| CWE-787Out-of-bounds Write | 58.8% | 40.0% | +18.8 |
| CWE-416Use After Free | 15.4% | 36.4% | -21.0 |
| CWE-908Use of Uninitialized Resource | 11.1% | 25.0% | -13.9 |
| CWE-415Double Free | 33.3% | 66.7% | -33.4 |
| CWE-1284Improper Validation of Specified Quantity in Input | 50.0% | 50.0% | 0.0 |
| CWE-843Access of Resource Using Incompatible Type ('Type Confusion') | 50.0% | 0.0% | +50.0 |
| CWE-476NULL Pointer Dereference | 0.0% | 50.0% | -50.0 |
| CWE-475 | 0.0% | 0.0% | 0.0 |
| CWE-562 | 0.0% | 0.0% | 0.0 |
Per-class samples are small; a difference here is a hint about where to look, not a result. The corpus-level intervals above are the honest comparison.
Corpus cve-bench-136 · run February 2026 · How we test
See the benchmark →