However, unless you can guarantee that every branch tested has been covered for all possibly relevant application states, that does not preclude CVEs.