Sharing is Caring: Insecure Deserialization of Shared References in C++

Deserialization attacks have grown in popularity over the past decade, with major flaws hitting tech giants and modern frameworks — even in 2025. Last July, a question came to mind: "What if we took insecure deserialization and brought it to C++?" I’ve had fond memories using .NET and PHP deserialization attacks to pop shells in CTFs, courses, and engagements, plus I enjoy tinkering with C++, so I…