CVE-2022-23884

2022-03-2812:08:40

mitre

www.cve.org

mojang bedrock server

integer overflow

purchasereceiptpacket

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

72.1%

JSON

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer).

References

s3.bmp.ovh/imgs/2022/01/962e0c75f5969cfb.png