CVE-2024-41564 - EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability

Back Back to CVE browser

MEDIUM

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability

Published Aug 28, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in EMI mod for Minecraft, which allows in-game item duplication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-129

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39075
Advisory
https://gist.github.com/apple502j/6d691b62c37fc37b03b0784917064df6
Third Party Advisory
https://github.com/emilyploszaj/emi/blob/1.21/xplat/src/main/java/dev/emi/emi/network/FillRecipeC2SPacket.java
Issue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39075		Advisory
https://gist.github.com/apple502j/6d691b62c37fc37b03b0784917064df6		Third Party Advisory
https://github.com/emilyploszaj/emi/blob/1.21/xplat/src/main/java/dev/emi/emi/network/FillRecipeC2SPacket.java		Issue Tracking

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 28, 2024

Updated Mar 26, 2025

Reserved Jul 18, 2024

Link CVE-2024-41564

CISA Vulnrichment

Updated Aug 28, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2024-41564

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 28, 2024

Updated Mar 26, 2025

Link EUVD-2024-39075

GitHub

No data