Is CVE-2022-51009 being exploited?

No public exploit is currently tracked.

How severe is CVE-2022-51009?

CVE-2022-51009 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2022-51009

Description

PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash.