Mojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound check bypass caused by PurchaseReceiptPacket::_read (packet deserializer).
References
Link Resource
https://s3.bmp.ovh/imgs/2022/01/962e0c75f5969cfb.png Exploit Third Party Advisory
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-03-28T12:08:40

Updated: 2022-03-28T12:08:40

Reserved: 2022-01-24T00:00:00


Link: CVE-2022-23884

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2022-03-28T13:15:07.807

Modified: 2022-04-04T20:29:59.923


Link: CVE-2022-23884

JSON object: View

cve-icon Redhat Information

No data.

CWE