CVE-2024-58380 — PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provide…
Published: 2026-09-09 · CVSS: 7.1 · CVSS 4.0
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7