THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2021-48007 (MEDIUM 6.5) — PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with invalid floating-point values to crash servers through unhandled mathematical operations or prevent c

[NVD] CVE-2021-48007 (MEDIUM 6.5) — PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with invalid floating-point values to crash servers through unhandled mathematical operations or prevent c

mednvdPublished 2026-09-06

CVE-2021-48007 CVSS: 6.5 MEDIUM Published: 2026-09-06T12:17:14.783

PocketMine-MP versions before 3.18.1 fail to validate NaN or INF values in MovePlayerPacket position and rotation fields. Malicious clients can send crafted movement packets with invalid floating-point values to crash servers through unhandled mathematical operations or prevent clients from rendering other players.

Indicators of compromise

CVE-2021-48007cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-48007