CVE-2024-42698

low-risk
Published 2024-08-28

Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset in Input vulnerability. The specific issue is a failure to validate slot index and decrement stack count in the Roughly Enough Items (REI) mod for Minecraft, which allows in-game item duplication.

Do I need to act?

-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Roughlyenoughitems

Affected Vendors

Shedaniel

References (2)

Third Party Advisory https://gist.github.com/apple502j/7b1af0082449c9bfbf910e9a25ef3595
Patch https://github.com/shedaniel/RoughlyEnoughItems/commit/e80ca84f1affb91d2388ddb29...
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal