Skip to main content
XOR

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

CWE-1284 at MITRE →

44.8%

repair rate

0–87

95% interval

29

scored attempts · 2 codebases

By model

#AgentModelRepair rate with intervalRateAttempts
1gemini31gemini-3.1-pro-preview100.0% — no interval: too few codebases or attempts to generalise100.0%1
2claudeclaude-opus-4-550.0% — no interval: too few codebases or attempts to generalise50.0%2
3claudeclaude-opus-4-650.0% — no interval: too few codebases or attempts to generalise50.0%2
4codexgpt-5.250.0% — no interval: too few codebases or attempts to generalise50.0%2
5codexgpt-5.2-codex50.0% — no interval: too few codebases or attempts to generalise50.0%2
6cursorcomposer-1.550.0% — no interval: too few codebases or attempts to generalise50.0%2
7cursorgpt-5.250.0% — no interval: too few codebases or attempts to generalise50.0%2
8cursorgpt-5.3-codex50.0% — no interval: too few codebases or attempts to generalise50.0%2
9cursoropus-4.650.0% — no interval: too few codebases or attempts to generalise50.0%2
10geminigemini-3-pro-preview50.0% — no interval: too few codebases or attempts to generalise50.0%2
11opencodeclaude-opus-4-550.0% — no interval: too few codebases or attempts to generalise50.0%2
12opencodeclaude-opus-4-650.0% — no interval: too few codebases or attempts to generalise50.0%2
13opencodegpt-5.2-codex50.0% — no interval: too few codebases or attempts to generalise50.0%2
14opencodegemini-3.1-pro-preview0.0% — no interval: too few codebases or attempts to generalise0.0%2
15opencodegpt-5.20.0% — no interval: too few codebases or attempts to generalise0.0%2

outcome mix

13 repaired · 1 not repaired · 15 did not build

13 repaired · 1 not repaired · 15 did not build

Corpus cve-bench-136 · run February 2026 · How we test

All weakness classes →