An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.