← Database

CVE-2022-23884

CRITICAL CVSS: 9.8 Published: 2022-03-28 Modified: 2026-06-17

Description

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer).

Affected Platforms

Minecraft Bedrock Server

Weakness Type

CWE-190

References