CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 4.2.9 are vulnerable due to improper validation of NBT data types during the deserialization of inventory transaction packets, allowing attackers to exploit this flaw by sending malformed NBT tags. This can lead to server crashes, resulting in a denial of service. Organizations using affected versions should prioritize patching to mitigate potential disruptions in service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. Attackers can send crafted inventory transactions with malformed NBT tags to trigger server crashes and cause denial of service.