CVE-2023-7332: Pmmp Pocketmine-Mp

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling. A remote attacker with a valid player session can request that the server drop more items than are available in the player's hotbar, triggering a server crash and resulting in denial of service.

Affected products

• Pmmp Pocketmine-Mp: before 4.18.1 (fixed in 4.18.1)

Published 2025-12-31. Last modified 2026-10-08.