CVE-2024-58380

    Dashboard / Vulnerabilities / CVE-2024-58380

    CVE-2024-58380

    Published: 9 Sept 2026Last Modified: 11 Sept 2026

    Summary: PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket

    Details: PocketMine-MP versions before 5.11.2 contain a denial of service vulnerability in BookEditPacket handling that crashes the server when an invalid inventory slot value is provided. Attackers can send a crafted BookEditPacket with an inventory slot greater than 35 to trigger an unhandled exception and crash the server.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58380.json, https://github.com/pmmp/PocketMine-MP/security/advisories/GHSA-xc7j-wj36-qjfr, https://nvd.nist.gov/vuln/detail/CVE-2024-58380, https://www.vulncheck.com/advisories/pocketmine-mp-before-5.11.2-denial-of-service-via-bookeditpacket, https://github.com/pmmp/PocketMine-MP/commit/47f011966092f275cc1b11f8de635e89fd9651a7

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -aee36564156b3dbb2791fb17ad1c01d16335b7b6

    Affected versions

    5.11.1
    5.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-58380 | CVE-DB