4 ms·

You mean something like arbitrary deserialization? That's a logical bug implementable in any language.