Fix bug #68594 - Use after free vulnerability in unserialize()
add missing test file
add CVE