The product does not properly handle when an input uses an alternate encoding that is valid for the control sphere to which the input is being sent.
MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out: