1809
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 913 Improper Control of Dynamically-Managed Code Resources 1805
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1019 Validate Inputs 2433
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 399 Resource Management Errors 2324
Applicable Platforms
Language : Java (Prevalence = Undetermined)
Language : Ruby (Prevalence = Undetermined)
Language : PHP (Prevalence = Undetermined)
Language : Python (Prevalence = Undetermined)
Language : JavaScript (Prevalence = Undetermined)
Technology : ICS/OT (Prevalence = Often)
Background Details
Serialization and deserialization refer to the process of taking program-internal object-related data,
packaging it in a way that allows the data to be externally stored or transferred ("serialization"),
then extracting the serialized data to reconstruct the original object ("deserialization").
Alternate Terms
Marshaling, Unmarshaling : Marshaling and unmarshaling are effectively synonyms for
serialization and deserialization, respectively.
Pickling, Unpickling : In Python, the "pickle" functionality is used to perform serialization and
deserialization.
CWE Version 4.14
CWE-502: Deserialization of Untrusted Data
CWE-502: Deserialization of Untrusted Data