CyberRota Analysis
AI-GeneratedNLTK versions prior to 3.10.3 are susceptible to a quadratic CPU exhaustion vulnerability in the XMLCorpusView._read_xml_fragment() function, which leads to excessive CPU usage when processing malformed XML corpus files. This can result in denial of service for applications utilizing affected readers, such as BNCCorpusReader. Developers and organizations using NLTK for XML processing should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK versions before 3.10.3 contain a quadratic CPU exhaustion vulnerability in XMLCorpusView._read_xml_fragment() that rescans accumulated XML fragments on every 1 KiB block read. Attackers can provide malformed XML corpus files to cause severe CPU consumption and denial of service through affected readers like BNCCorpusReader.