symfony
diff --git a/‎src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
+7Lines changed: 7 additions & 0 deletions b/‎src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
+7Lines changed: 7 additions & 0 deletions
diff --git a/‎src/Symfony/Component/Serializer/Tests/SerializerTest.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Serializer/Tests/SerializerTest.php
+18Lines changed: 18 additions & 0 deletions b/‎src/Symfony/Component/Serializer/Tests/SerializerTest.php
Copy file name to clipboardExpand all lines: src/Symfony/Component/Serializer/Tests/SerializerTest.php
+18Lines changed: 18 additions & 0 deletions
@@ -458,6 +458,13 @@ protected function instantiateObject(array &$data, string $class, array &$contex
 
         unset($context['has_constructor']);
 
+        if (!$reflectionClass->isInstantiable()) {
+            throw NotNormalizableValueException::createForUnexpectedDataType(
+                sprintf('Failed to create object because the class "%s" is not instantiable.', $class),
+                $data,
+                []
+            );
+        }
         return new $class();
     }
 
 
@@ -69,6 +69,7 @@
 use Symfony\Component\Serializer\Tests\Fixtures\Php74Full;
 use Symfony\Component\Serializer\Tests\Fixtures\Php80WithPromotedTypedConstructor;
 use Symfony\Component\Serializer\Tests\Fixtures\TraversableDummy;
+use Symfony\Component\Serializer\Tests\Fixtures\UnitEnumDummy;
 use Symfony\Component\Serializer\Tests\Fixtures\WithTypedConstructor;
 use Symfony\Component\Serializer\Tests\Normalizer\TestDenormalizer;
 use Symfony\Component\Serializer\Tests\Normalizer\TestNormalizer;
@@ -716,6 +717,23 @@ public function testDeserializeInconsistentScalarType()
         $serializer->deserialize('"42"', 'int', 'json');
     }
 
+    /**
+     * @requires PHP 8.1
+     */
+    public function testDeserializeWhenObjectNotInstantiable()
+    {
+        $this->expectException(NotNormalizableValueException::class);
+
+        $serializer = new Serializer(
+            [
+                new BackedEnumNormalizer(),
+                new ObjectNormalizer(),
+            ],
+            ['json' => new JsonEncoder()]
+        );
+        $serializer->deserialize('{}', UnitEnumDummy::class, 'json');
+    }
+
     public function testDeserializeScalarArray()
     {
         $serializer = new Serializer([new ArrayDenormalizer()], ['json' => new JsonEncoder()]);