Examples of StackOverflowException triggered by malicious data. Vulnerable libraries:
- protobuf-net 3.0.131
- FlatSharp 6.2.1
- Bond.CSharp 10.0.0
- Newtonsoft.Json 12.0.3
- MessagePack 2.1.80
- System.Xml.XmlSerializer 7.0.0
Read my blog post to learn more: How safe are .NET serialization libraries against StackOverflowException.