High severity7.5NVD Advisory· Published Sep 9, 2026· Updated Oct 8, 2026

CVE-2024-58381

Description

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties, causing the application to crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pmmp/Pocketmine Mpreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <5.11.1

Patches

Vulnerability mechanics

References

github.com/pmmp/PocketMine-MP/commit/6872661fd03649cc7a8762c41c16e9ee5a4de1c9nvd
github.com/pmmp/PocketMine-MP/commit/b96a209f9e8b76b899a0d0918493cd87eb3c02a7nvd
github.com/pmmp/PocketMine-MP/security/advisories/GHSA-h6j3-j35f-v2x7nvd
www.vulncheck.com/advisories/pocketmine-mp-before-5.11.1-denial-of-service-via-loginpacketnvd

News mentions

PocketMine-MP: 18 DoS Vulnerabilities Disclosed in Coordinated Batch
Vypr Intelligence · Sep 9, 2026

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000