What is CVE-2022-51009?

CVE-2022-51009 is a high-severity vulnerability in Pmmp Pocketmine-Mp, classified under CWE-248. CVSS score: 7.5/10. Published 2026-09-06.

How severe is CVE-2022-51009?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Pmmp Pocketmine-Mp

CVE-2022-51009

PocketMine-MP before 4.7.2 fails to properly handle exceptions from the adhocore/json-comment library when parsing skin geometry data. Attackers can send login or skin packets with invalid geometry JSON to trigger an unhandled RuntimeException, causing server crash.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Pmmp Pocketmine-mp

Weakness classification (CWE)

CWE-248

References

disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2022-51009?: CVE-2022-51009 is a high-severity vulnerability in Pmmp Pocketmine-Mp, classified under CWE-248. CVSS score: 7.5/10. Published 2026-09-06.
How severe is CVE-2022-51009?: High severity. CVSS v3 base score is 7.5 out of 10.