    public static ByteBuffer serializeToByteBuffer(final Object payload) throws IOException {
        return ByteBuffer.wrap(serializeToBytes(payload));
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.