SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2024-58380

MEDIUM · CVSS 6.5 EPSS 0.38% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

PocketMine-MP versions prior to 5.11.2 are vulnerable to a denial of service attack due to improper handling of the BookEditPacket, which can be exploited by sending a malicious packet with an invalid inventory slot value. This vulnerability can lead to server crashes, disrupting service availability. Administrators of affected PocketMine-MP installations should prioritize updating to the latest version to mitigate this risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
poc
GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-58380
Severity
MEDIUM
CVSS
6.5
EPSS
0.38%

Original NVD Description

PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.