CVE-2022-51010
Received Received - Intake

PocketMine-MP Pre-4.4.2 Item ID Validation Failure Leading to Server Crash

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: VulnCheck

Description
PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2022-51010
EUVD
EUVD-2022-56039

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
pocketmine mp to 4.4.2 (exc)
pocketmine-mp pocketmine-mp to 4.4.2 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2022-51010 is a vulnerability in PocketMine-MP versions before 4.4.2 where the server fails to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range, triggering an uncaught exception that crashes the server.

Detection Guidance

Monitor PocketMine-MP server logs for crashes or exceptions related to item ID validation failures. Check for server instability or unexpected shutdowns during gameplay.

Impact Analysis

This vulnerability can cause server crashes by exploiting improper input validation of item IDs. It allows attackers with low privileges to disrupt server availability without affecting confidentiality or integrity. The impact is limited to server downtime and potential loss of service for users.

Compliance Impact

This vulnerability primarily impacts server availability by causing crashes, which does not directly affect compliance with standards like GDPR or HIPAA. However, repeated crashes could lead to service disruptions affecting data processing or availability, potentially violating availability requirements in these regulations.

Mitigation Strategies

Upgrade PocketMine-MP to version 4.4.2 or later to apply the official patch that validates item IDs.

If upgrading is not immediately possible, restrict network access to the server or implement strict input validation via plugins as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-51010. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart