← Database

CVE-2024-58380

MEDIUM CVSS: 6.5 Published: 2026-09-09 Modified: 2026-09-18

Description

PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.

Affected Platforms

Unknown

Weakness Type

CWE-20

References