CWE-502

Deserialization of Untrusted Data

Description

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.