A vulnerability exists in the Serialization component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This flaw allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service. The vulnerability affects several supported versions of these products. Exploitation requires use of APIs in the Serialization component, such as through web services supplying data to these APIs. The vulnerability also impacts sandboxed Java Web Start applications or applets that load untrusted code relying on the Java sandbox for security. The CVSS 3.1 base score is 3.7, indicating a low severity impact focused on availability. Oracle has released security patches as part of their October 2024 Critical Patch Update.