CyberRota Analysis
AI-GeneratedNLTK versions prior to 3.10.3 are vulnerable to an uncontrolled recursion issue in the FeatStructReader, which can be exploited by unauthenticated attackers to induce a denial of service. By submitting deeply nested feature-structure inputs, attackers can exceed Python's recursion limit, leading to application crashes. Organizations using NLTK for parsing user-supplied feature structures or grammars should prioritize upgrading to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure input. Attackers can craft trivial payloads with nested brackets that exceed Python's recursion limit and raise an unhandled RecursionError, crashing applications that parse user-supplied feature structures or feature grammars.
Related CVEs
Other vulnerabilities affecting the same vendor(s)