Security Advisory
CVE-2021-48007
CVSS 6.5
MEDIUM
Vulnerability Description
PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with invalid floating-point values to crash servers through unhandled mathematical operations or prevent clients from rendering other players.
Published Date
2026-09-06T12:17:14.783
Data Feed
NIST National Vulnerability Database