Serialization bugs have been a big problem for Java Reinhold told InfoWorld that serialization issues could be very easily responsible for a third or even a half of all known Java flaws.

The vulnerability exploits the way R handles serialization ('saveRDS') and deserialization ('readRDS'), particularly through promise objects and "lazy evaluation." ...