Beveiligingsadvies

CVE-2022-51013

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-07 12:55:07
Laatst bijgewerkt 2026-09-14 19:33:07
Toegewezen door VulnCheck
CVSS-score 7.1
Status PUBLISHED

Beschrijving

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes.