PT-2026-86515 · Unknown · Pocketmine-Mp
CVE-2021-48007
·
Published
2022-03-18
·
Updated
2026-09-06
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
PocketMine-MP versions prior to 3.18.1
Description
The software fails to validate NaN (Not-a-Number) or INF (Infinity) values within the position and rotation fields of the
MovePlayerPacket. Malicious clients can send crafted movement packets containing these invalid floating-point values, leading to server crashes caused by unhandled mathematical operations or preventing the rendering of other players for clients.Recommendations
Update to version 3.18.1 or later.
Exploit
Fix
DoS
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pocketmine-Mp