        public int read() throws IOException {
            return inner.read();
        }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.