CVE-2021-33806

State: Published
Severity: Not scored
Published: Jun 3, 2021
Updated: Aug 3, 2024
Reserved: Jun 3, 2021

Description

The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://bdew.net/
https://www.curseforge.com/minecraft/mc-mods/bdlib/files/3331330
https://vuln.ryotak.me/advisories/46
https://github.com/bdew-minecraft/bdlib/commit/447210530ceec72fb3374efecb0930ed359d2297

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.