Oversized Serialized Data Payloads
CAPEC-231 · Standard · Draft
An adversary injects oversized serialized data payloads into a parser during data processing to produce adverse effects upon the parser such as exhausting system resources and arbitrary code execution.
likelihood: Medium
severity: High