PT-2026-89001
CVE-2026-86198
·
تاريخ النشر
2026-09-09
·
تاريخ التحديث
2026-10-29
الوصف من
CVSS 3.1
4.2
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions
PocketMine-MP versions prior to 5.44.2
Description
Improper validation of multiple
ResourcePackClientResponsePacket packets with STATUS COMPLETED status occurs during resource pack handling. This allows malicious clients to send batches of these packets to repeatedly trigger pre-spawn progression, which results in the creation of duplicate Player objects and increases memory consumption and network traffic.Recommendations
Update to version 5.44.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾