CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 4.2.3 are vulnerable due to inadequate validation of damage metadata in tool and armor item NBT data, allowing attackers to send negative or out-of-range values. This can lead to unhandled exceptions in the Durable class, resulting in server crashes. Server administrators using affected versions should prioritize this vulnerability to prevent potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. Attackers can send negative or out-of-range damage values in itemstack NBT to trigger unhandled exceptions in the Durable class, causing server crashes.