CVE-2025-71417

PocketMine-MP versions prior to 5.32.1 contain a denial-of-service vulnerability in the ResourcePackClientResponsePacket handling during the STATUS_SEND_PACKS phase. The server fails to validate uniqueness of pack UUIDs, allowing authenticated clients to send multiple copies of the same valid pac...

CVE-2025-71417 PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUSSENDPACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server...

CVE-2025-71417 PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUSSENDPACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server...

EUVD-2025-210880

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUSSENDPACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust server...

PT-2026-88991

PocketMine-MP before 5.32.1 fails to validate uniqueness of pack UUIDs in ResourcePackClientResponsePacket STATUS SEND PACKS handling, allowing authenticated clients to trigger duplicate pack transmissions. Attackers can send multiple copies of valid pack UUIDs in a single packet to exhaust serve...