What is CVE-2024-58381?

CVE-2024-58381 is a high-severity vulnerability in Pmmp Pocketmine-Mp, classified under Deserialization of Untrusted Data. CVSS score: 7.5/10. Published 2026-09-09.

How severe is CVE-2024-58381?

High severity. CVSS v3 base score is 7.5 out of 10.

Deserialization in Pmmp Pocketmine-Mp

CVE-2024-58381

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties, causing the application to crash.

Vulnerability class: Insecure Deserialization

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Pmmp Pocketmine-mp

Weakness classification (CWE)

CWE-502 — Deserialization of Untrusted Data

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2024-58381?: CVE-2024-58381 is a high-severity vulnerability in Pmmp Pocketmine-Mp, classified under Deserialization of Untrusted Data. CVSS score: 7.5/10. Published 2026-09-09.
How severe is CVE-2024-58381?: High severity. CVSS v3 base score is 7.5 out of 10.