| HasMember | Discouraged | C | 119 | Improper Restriction of Operations within the Bounds of a Memory Buffer |
| HasMember | Allowed | B | 1190 | DMA Device Enabled Too Early in Boot Phase |
| HasMember | Allowed | B | 1191 | On-Chip Debug and Test Interface With Improper Access Control |
| HasMember | Allowed-with-Review | B | 120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') |
| HasMember | Allowed | V | 121 | Stack-based Buffer Overflow |
| HasMember | Allowed | V | 122 | Heap-based Buffer Overflow |
| HasMember | Allowed | B | 1220 | Insufficient Granularity of Access Control |
| HasMember | Allowed | B | 123 | Write-what-where Condition |
| HasMember | Allowed | B | 1231 | Improper Prevention of Lock Bit Modification |
| HasMember | Allowed | B | 1232 | Improper Lock Behavior After Power State Transition |
| HasMember | Allowed | B | 1233 | Security-Sensitive Hardware Controls with Missing Lock Bit Protection |
| HasMember | Allowed | B | 124 | Buffer Underwrite ('Buffer Underflow') |
| HasMember | Allowed | B | 1242 | Inclusion of Undocumented Features or Chicken Bits |
| HasMember | Allowed | B | 1243 | Sensitive Non-Volatile Information Not Protected During Debug |
| HasMember | Allowed | B | 1244 | Internal Asset Exposed to Unsafe Debug Access Level or State |
| HasMember | Allowed | B | 1247 | Improper Protection Against Voltage and Clock Glitches |
| HasMember | Allowed | B | 1253 | Incorrect Selection of Fuse Values |
| HasMember | Allowed | V | 1255 | Comparison Logic is Vulnerable to Power Side-Channel Attacks |
| HasMember | Allowed | B | 1256 | Improper Restriction of Software Interfaces to Hardware Features |
| HasMember | Allowed | B | 1257 | Improper Access Control Applied to Mirrored or Aliased Memory Regions |
| HasMember | Allowed | B | 1259 | Improper Restriction of Security Token Assignment |
| HasMember | Allowed | B | 1260 | Improper Handling of Overlap Between Protected Memory Ranges |
| HasMember | Allowed | B | 1262 | Improper Access Control for Register Interface |
| HasMember | Allowed | B | 1267 | Policy Uses Obsolete Encoding |
| HasMember | Allowed | B | 1268 | Policy Privileges are not Assigned Consistently Between Control and Data Agents |
| HasMember | Allowed | B | 1270 | Generation of Incorrect Security Tokens |
| HasMember | Allowed | B | 1273 | Device Unlock Credential Sharing |
| HasMember | Allowed | B | 1274 | Improper Access Control for Volatile Memory Containing Boot Code |
| HasMember | Allowed | B | 128 | Wrap-around Error |
| HasMember | Allowed | B | 1280 | Access Control Check Implemented After Asset is Accessed |
| HasMember | Allowed | V | 129 | Improper Validation of Array Index |
| HasMember | Allowed | B | 1290 | Incorrect Decoding of Security Identifiers |
| HasMember | Allowed | B | 1291 | Public Key Re-Use for Signing both Debug and Production Code |
| HasMember | Allowed | B | 1292 | Incorrect Conversion of Security Identifiers |
| HasMember | Allowed-with-Review | C | 1294 | Insecure Security Identifier Mechanism |
| HasMember | Allowed | B | 1296 | Incorrect Chaining or Granularity of Debug Components |
| HasMember | Allowed | B | 1297 | Unprotected Confidential Information on Device is Accessible by OSAT Vendors |
| HasMember | Allowed | B | 1299 | Missing Protection Mechanism for Alternate Hardware Interface |
| HasMember | Allowed | B | 130 | Improper Handling of Length Parameter Inconsistency |
| HasMember | Allowed | B | 1302 | Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) |
| HasMember | Allowed | B | 131 | Incorrect Calculation of Buffer Size |
| HasMember | Allowed | B | 1311 | Improper Translation of Security Attributes by Fabric Bridge |
| HasMember | Allowed | B | 1312 | Missing Protection for Mirrored Regions in On-Chip Fabric Firewall |
| HasMember | Allowed | B | 1313 | Hardware Allows Activation of Test or Debug Logic at Runtime |
| HasMember | Allowed | B | 1315 | Improper Setting of Bus Controlling Capability in Fabric End-point |
| HasMember | Allowed | B | 1316 | Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges |
| HasMember | Allowed | B | 1317 | Improper Access Control in Fabric Bridge |
| HasMember | Allowed | B | 1318 | Missing Support for Security Features in On-chip Fabrics or Buses |
| HasMember | Allowed | B | 1319 | Improper Protection against Electromagnetic Fault Injection (EM-FI) |
| HasMember | Allowed | B | 1326 | Missing Immutable Root of Trust in Hardware |
| HasMember | Allowed | V | 1330 | Remanent Data Readable after Memory Erase |
| HasMember | Allowed | B | 134 | Use of Externally-Controlled Format String |
| HasMember | Allowed | B | 1342 | Information Exposure through Microarchitectural State after Transient Execution |
| HasMember | Allowed | B | 1429 | Missing Security-Relevant Feedback for Unexecuted Operations in Hardware Interface |
| HasMember | Allowed | B | 170 | Improper Null Termination |
| HasMember | Allowed | B | 188 | Reliance on Data/Memory Layout |
| HasMember | Allowed | B | 190 | Integer Overflow or Wraparound |
| HasMember | Allowed | B | 191 | Integer Underflow (Wrap or Wraparound) |
| HasMember | Allowed | B | 193 | Off-by-one Error |
| HasMember | Allowed | V | 194 | Unexpected Sign Extension |
| HasMember | Allowed | V | 196 | Unsigned to Signed Conversion Error |
| HasMember | Allowed | B | 197 | Numeric Truncation Error |
| HasMember | Discouraged | C | 20 | Improper Input Validation |
| HasMember | Allowed | B | 364 | Signal Handler Race Condition |
| HasMember | Allowed | B | 367 | Time-of-check Time-of-use (TOCTOU) Race Condition |
| HasMember | Allowed | B | 374 | Passing Mutable Objects to an Untrusted Method |
| HasMember | Allowed | B | 375 | Returning a Mutable Object to an Untrusted Caller |
| HasMember | Allowed | V | 415 | Double Free |
| HasMember | Allowed | V | 416 | Use After Free |
| HasMember | Allowed | B | 466 | Return of Pointer Value Outside of Expected Range |
| HasMember | Allowed | V | 467 | Use of sizeof() on a Pointer Type |
| HasMember | Allowed | B | 468 | Incorrect Pointer Scaling |
| HasMember | Allowed | B | 469 | Use of Pointer Subtraction to Determine Size |
| HasMember | Allowed | B | 476 | NULL Pointer Dereference |
| HasMember | Allowed | V | 479 | Signal Handler Use of a Non-reentrant Function |
| HasMember | Allowed | B | 562 | Return of Stack Variable Address |
| HasMember | Allowed | V | 587 | Assignment of a Fixed Address to a Pointer |
| HasMember | Allowed | V | 588 | Attempt to Access Child of a Non-structure Pointer |
| HasMember | Allowed | V | 590 | Free of Memory not on the Heap |
| HasMember | Allowed | B | 663 | Use of a Non-reentrant Function in a Concurrent Context |
| HasMember | Discouraged | C | 680 | Integer Overflow to Buffer Overflow |
| HasMember | Discouraged | C | 690 | Unchecked Return Value to NULL Pointer Dereference |
| HasMember | Allowed | V | 761 | Free of Pointer not at Start of Buffer |
| HasMember | Allowed | V | 762 | Mismatched Memory Management Routines |
| HasMember | Allowed | B | 763 | Release of Invalid Pointer or Reference |
| HasMember | Allowed | B | 765 | Multiple Unlocks of a Critical Resource |
| HasMember | Allowed | V | 781 | Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code |
| HasMember | Allowed | V | 785 | Use of Path Manipulation Function without Maximum-sized Buffer |
| HasMember | Discouraged | B | 786 | Access of Memory Location Before Start of Buffer |
| HasMember | Allowed | B | 787 | Out-of-bounds Write |
| HasMember | Discouraged | B | 788 | Access of Memory Location After End of Buffer |
| HasMember | Allowed | B | 805 | Buffer Access with Incorrect Length Value |
| HasMember | Allowed | V | 806 | Buffer Access Using Size of Source Buffer |
| HasMember | Allowed | B | 822 | Untrusted Pointer Dereference |
| HasMember | Allowed | B | 823 | Use of Out-of-range Pointer Offset |
| HasMember | Allowed | B | 826 | Premature Release of Resource During Expected Lifetime |
| HasMember | Allowed | B | 832 | Unlock of a Resource that is not Locked |
| HasMember | Allowed | B | 839 | Numeric Range Comparison Without Minimum Check |
| HasMember | Allowed | B | 843 | Access of Resource Using Incompatible Type ('Type Confusion') |