CVE-2022-51012 | BDVDB-2026-368674 Detail

Description#

PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-07Record published in the CVE List.
2. Version 22026-10-08Most recent update recorded in the CVE List.