Insecure Deserialization is a vulnerability in which untrusted serialized data is processed in a way that can alter application logic or execute unintended behavior.
It is important in application security because serialized objects may cross trust boundaries through APIs, sessions, queues, or files.