CyberRota Analysis
AI-GeneratedPocketMine-MP versions prior to 4.7.2 are vulnerable to a denial-of-service attack due to improper exception handling in the adhocore/json-comment library when processing skin geometry data. Attackers can exploit this vulnerability by sending malformed login or skin packets, leading to an unhandled RuntimeException that crashes the server. Organizations running affected versions should prioritize patching to mitigate potential disruptions to service.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash.