CVE-2024-58380
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Sep 09, 2026
Vendor
unknown
Description
PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.