Common Weakness Enumeration

    CWE Definition / CWE-502

    CWE-502: Deserialization of Untrusted Data

    The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:30 Apr 2026

    Related Weakness

    CWE-913: Improper Control of Dynamically-Managed Code Resources

    CWE-913: Improper Control of Dynamically-Managed Code Resources

    CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes