CVE-2022-51018 PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages

PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create oversized NBT 'book bombs', causing excess bandwidth consumption and server crashes exceeding the 1 MB chunk size limit when...

CVE-2022-51018 PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages

PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. A player who obtains a writable book can create oversized NBT 'book bombs', causing excess bandwidth consumption and server crashes exceeding the 1 MB chunk size limit when...

CVE-2022-51018

PocketMine-MP versions before 3.26.5 and 4.0.x before 4.0.5 lack input validation on book item NBT fields (page text length, page count, author/title length). A player with a writable book can craft oversized NBT payloads ("book bombs"), causing excess bandwidth consumption and server crashes by ...

CVE-2022-51011

PocketMine-MP before 4.2.10 is vulnerable to a denial of service caused by insufficient validation of incoming chat message blobs. The server fails to check the total length of chat packets before splitting them on newline characters, allowing a malicious client to send megabyte-sized messages co...

CVE-2022-51010 PocketMine-MP before 4.4.2 Server Crash via Item ID

PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Attackers can send crafted item IDs outside the valid range to trigger an uncaught exception that crashes the server...

CVE-2025-52651

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

CVE-2025-52651 HCL MyXalytics is affected by multiple security vulnerabilities.

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

EUVD-2025-210859

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

CVE-2025-52651

HCL MyXalytics is affected by an Improper Input Validation vulnerability that allows malicious or unexpected data to cause unintended system behaviour or security issues. The CNA-assigned CVSS 3.1 score is 3.5 (LOW) , with a network vector, low attack complexity, low privileges required, and user...

CVE-2025-52651 HCL MyXalytics is affected by multiple security vulnerabilities.

HCL MyXalytics was affected by Improper Input validation Vulnerability. It allow malicious or unexpected data to cause unintended system behaviour or security issues...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20500

In Modem, there is a possible system crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is needed for exploitation. Patch ID: MOLY01810811; Issue ID: MSV-9232...

EUVD-2026-72206

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

A vulnerability in the Audio HAL component allows for potential local information disclosure due to improper input validation . Exploitation requires the malicious actor to have already obtained System privilege , and no user interaction is required. Remediation is addressed under Patch ID: ALPS1...

EUVD-2026-72205

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...

CVE-2026-20512

In Audio HAL, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087540; Issue ID: MSV-8246...