Skip to content
OpenAdvisories

Package · Packagist

pocketmine/bedrock-protocol

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-5jfw-35xp-5m42

    Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown

    ### Impact `LoginPacket` uses `BinaryStream->getLInt()` to read the lengths of JSON payloads it wants to decode. Unfortunately, `BinaryStream->getLInt()` returns a signed integer, meaning that a malicious client can craft a packet with a large uint32 value fo…

    pocketmine/bedrock-protocol Packagist