medium6.5
CVE-2022-51012
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients.
Impact
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service.
Affected products
| Product | Affected versions |
|---|---|
| PocketMine-MP | before 4.2.9 |
Versions were read from the advisory text. No structured product data has been published for this record yet.