CyberRota Analysis
AI-GeneratedPocketMine-MP versions 4.20.0 to 4.22.2 and 5.x versions prior to 5.2.1 are vulnerable due to inadequate validation of NBT tag types in BlockActorDataPacket. An attacker can exploit this vulnerability by sending a malicious packet with incorrect sign NBT data, leading to a server crash through an unhandled exception. Server administrators using affected versions should prioritize this issue to prevent potential downtime and service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server by sending a packet containing sign NBT data with an incorrect tag type, triggering an unhandled UnexpectedTagTypeException that terminates the server process.