Is CVE-2021-48007 being exploited?

No public exploit is currently tracked.

How severe is CVE-2021-48007?

CVE-2021-48007 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2021-48007

Description

PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with invalid floating-point values to crash servers through unhandled mathematical operations or prevent clients from rendering other players.