Untrusted data is most often data that comes from the HTTP request, in the form of URL parameters, form fields, headers, or cookies. ... That is, untrusted data is input that can be manipulated to contain a web attack payload.

What is untrusted source?

When you install an app from an untrusted source, you have no way of knowing if the app has been vetted. ... This means the app you just installed from outside of the Google Play Store could gain access to your contacts, your call logs, and your data.

What is Deserialization of untrusted data?

Deserialization of untrusted data (CWE-502) occurs when an application deserializes untrusted data without sufficiently verifying that the resulting data will be valid, allowing the attacker to control the state or the flow of the execution.