CVEvulnerability
CVE-2021-33806
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2021-06-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-502
Description
The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization.
Affected configurations
• bdew bdlib (< 1.16.1.7)
Related
Weakness · CWE (1)
- CWE-502 Deserialization of Untrusted Data weakness
References
- https://bdew.net Release Notes, Vendor Advisory
- https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297 Patch, Third Party Advisory
- https://vuln.ryotak.me/advisories/46 Third Party Advisory
- https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330 Product, Third Party Advisory
- https://bdew.net Release Notes, Vendor Advisory
- https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297 Patch, Third Party Advisory
- https://vuln.ryotak.me/advisories/46 Third Party Advisory
- https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330 Product, Third Party Advisory