CVE-2022-23884

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::read packet deserializer...

CVE-2022-23884

creationtimestamp| type| source ---|---|--- 2022-03-28 16:39:14+00:00| seen| https://t.me/cibsecurity/39641 2022-03-30 06:26:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1746...

CVE-2022-23884

Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::read packet deserializer...

CVE-2022-23884

CVE-2022-23884 affects Mojang Bedrock Dedicated Server 1.18.2. The issue is an integer overflow in the packet deserializer, specifically PurchaseReceiptPacket::_read, which allows a bound check bypass. Impact is described as high/critical depending on the metric (CVSS2: 7.5 (HIGH), CVSS3.1: 9.8 (...