← Database

CVE-2022-51013

MEDIUM CVSS: 6.5 Published: 2026-09-07 Modified: 2026-09-14

Description

PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes.

Affected Platforms

Unknown

Weakness Type

CWE-20

References