Security Advisory
CVE-2022-51013
CVSS 6.5
MEDIUM
Vulnerability Description
PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes.
Published Date
2026-09-07T13:17:23.173
Data Feed
NIST National Vulnerability Database