CVE-2021-33806

CRITICO 9.8CVE-2021-33806 · Published 03/06/2021 · updated 17/06/2026

In breve

CVE-2021-33806 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda bdlib (bdew).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.0%, superiore al 87.4% delle vulnerabilità.
Correzione: aggiornare a 1.16.1.7 o successiva.

Package	Affected versions	Patched versions
bdlib bdew	`< 1.16.1.7`	`1.16.1.7`

Description

The BDew BdLib library before 1.16.1.7 for Minecraft allows remote code execution because it deserializes untrusted data in ObjectInputStream.readObject as part of its use of Java serialization.

References

bdew.net · Release Notes
bdew-minecraft/bdlib commit 4472105 · Patch
vuln.ryotak.me/advisories/46 · Third Party Advisory
curseforge.com/minecraft/mc-mods/bdlib/files/3331330 · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free