## 4 Materials and Methods
### Proto-MAML
#### 4.3.2 Proto-MAML Training Within a BERT-Enhanced QA Framework
\begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Study** & **Sample Size and Labeling** & **CWEs Addressed** & **Summary of Vulnerabilities** \\ \hline \multirow{9}{*}{Proto-MAML (This project)} & & CWE-20, CWE-79, CWE-89, CWE-78, CWE-352, CWE-22, CWE-24, CWE-502, CWE-601, CWE-30, CWE-209, CWE-287, CWE-400, CWE-476, CWE-152, CWE-191, CWE-125, CWE-787, CWE-416, CWE-200, CWE-362, CWE-722, CWE-399 & \\  & 18,879 samples with 9867 vulnerable code & CWE-20, CWE-30, CWE-35, CWE-30, CWE-35, CWE-36, CWE-37, CWE-4038 for C++, with no labeling required & \\  & & CWE-20, CWE-79, CWE-125, CWE-787 & \\  & & CWE-20, CWE-362, CWE-399 & \\ \hline \multirow{9}{*}{Sy-SeVR [27]} & 14,780 samples transformed into 340,000 token-level elements for C and C++, labeled as secure or insecure & CWE-119, CWE-125, CWE-787 & \begin{tabular}{l} Focuses on memory vulnerabilities such as buffer overflows, out-of-bounds reads, and improper memory restriction. Applicable to C and C++ in systems programming and embedded systems. \\ \end{tabular} \\ \hline \multirow{2}{*}{BBVD [29]} & 16,436 samples for C and C++, with slices labeled as safe or unsafe & CWE-400, CWE-20, CWE-416 & \begin{tabular}{l} Addresses uncontrolled resource consumption, improper input validation, and use-after-free errors. Targets C and C++ in high-performance and real-time systems. \\ \end{tabular} \\ \hline \multirow{2}{*}{VulDefend [30]} & 4000 samples for C/C++ with fragment and token-level labeling & CWE-89, CWE-79, CWE-352 & \begin{tabular}{l} SQL injection, cross-site scripting, and cross-site request forgery vulnerabilities in web applications. \\ \end{tabular} \\  & 29,000 samples for C transformed into 420,627 fragments, labeled as vulnerable or vulnerable & CWE-119, CWE-125, CWE-787 & \begin{tabular}{l} Memory vulnerabilities including buffer overflows and out-of-bounds reads in C-based systems. \\ \end{tabular} \\ \hline \multirow{2}{*}{SeqTrans [31]} & 5000 samples for Java transformed into 650,000 secure-insecure mappings with token-level labeling & CWE-287, CWE-20, CWE-189 & \begin{tabular}{l} Authentication issues, resource misuse, and numeric errors in Java applications. \\ \end{tabular} \\ \hline \multirow{2}{*}{VR repair [32]} & 655,741 confirmed vulnerabilities from 1,838,740 commits for insecure C code with no labeling required, BERT-based output & CWE-20, CWE-79, CWE-287 & \begin{tabular}{l} Focuses on unsafe inputs, poor sanitization, permission control, and information exposure in C codebases. \\ \end{tabular} \\ \hline \multirow{2}{*}{DB-CBIL [33]} & 33,360 vulnerable functions from C and C++ with token-level sequence labeling & CWE-119, CWE-125, CWE-476 & \begin{tabular}{l} Addresses memory management issues, including null pointer dereferences, buffer overflows, and out-of-bounds reads in C and C++. \\ \end{tabular} \\ \hline \multirow{2}{*}{VuRLE [34]} & 48 samples for Java with cluster-based outputs, no labeling required & CWE-20, CWE-89, CWE-287 & \begin{tabular}{l} Focuses on misplaced resources, injection vulnerabilities, and authentication weaknesses in Java frameworks. \\ \end{tabular} \\ \hline \multirow{2}{*}{VulD-Transformer [35]} & \begin{tabular}{l} Between 22,148 and 291,892 samples for C and C++, with 937,608 processed examples labeled as vulnerable or not vulnerable \\ \end{tabular} & \begin{tabular}{l} CWE-219, CWE-476, CWE-125 \\ CWE-125 \\ \end{tabular} & \begin{tabular}{l} API function misuse, memory errors, and null pointer dereference vulnerabilities in C and C++ systems. \\ \end{tabular} \\ \hline \multirow{2}{*}{GPT survey [36]} & \begin{tabular}{l} Unspecified number of samples for C and C++ \\ \end{tabular} & \
\begin{tabular}{l} CWE-121, CWE-758, CWE-242 \\ CWE-242 \\ \end{tabular} &
\begin{tabular}{l} Covers buffer overflows, risky functions, and integer overflows in C and C++ implementations. \\ \end{tabular} \\ \hline \hline \end{tabular}
\end{table} 
Table 10: Comparison of sample sizes, labeling, and vulnerabilities across different state-of-the-art studies.