    def item_to_bm(self, item):
        return cPickle.loads(bytes(item.data(Qt.UserRole)))
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.