DTStack chunjun’s core utility deserializes incoming data without verifying its integrity, leading to a stack overflow when malicious input is processed. This flaw results in a denial‑of‑service condition for affected applications.

The vulnerability applies to all installations of DTStack chunjun that use the chunjun-core component and are running versions earlier than 1.16.1. Any deployment that incorporates these components is at risk.

The CVSS base score of 8.7 indicates high severity. EPSS data is unavailable and the vulnerability is not cataloged in the CISA KEV list. The attack most likely requires an attacker to supply crafted input to the deserialization routine, which can cause application crashes or extended downtime.