Address disclosure via raw pointer reference tampering

Insecure deserialization in Cista 0.15 and earlier allows remote attackers to disclose stack or heap addresses via crafted data. The cista::raw pointer-like classes accept manipulated serialized offsets without rejecting self-references or references to other payload regions, so later dereferences expose process addresses. Disclosure requires a consuming application to deserialize attacker-controlled bytes and return, render, or log the resulting values; the leaked address can defeat ASLR for follow-on exploitation.