False identification of CWE-120, CWE-20 in C++ code

A code like this gets a false alert about unsafe use of read() syscall although what it calls is a class method unrelated to the syscall:

    try
    {
        message.read(objectPath, interfacesDict);
    }
    catch (sdbusplus::exception_t& ex)