Modscraper Modscraper Minecraft
CrashExploitFixer logo

CrashExploitFixer

Mod

by drexhd

This mod fixes a bunch of crash exploits discovered in Minecraft.

Type

Mod

CurseForge Downloads

25,857,712

CurseForge ID

1079896

Modrinth Downloads

2,974,619

Modrinth ID

Z5GdSH3X

Last Updated

Nov 7, 2026

Description

CrashExploitFixer

The mod currently patches three different exploits for all affected Minecraft versions from 1.14.4 to Latest!

Entity Selector NBT Stack Overflow

A stack overflow vulnerability in Minecraft versions 1.14.4 through the latest release at the time of writing allows attackers to crash servers by abusing deeply nested NBT data inside entity selectors, causing recursive parsing in TagParser to exhaust the JVM stack. While Minecraft 1.21.1 prevents unprivileged players from triggering the issue through entity selectors, operators and creative-mode players can still reproduce the crash on unpatched servers. Notably, PaperMC discovered and patched the underlying parser issue months earlier.

Blogpost from haykam: haykam.com

Excessive Network Object Allocation

A denial-of-service vulnerability affecting Minecraft networking allowed authenticated players to crash servers by sending malicious packets that triggered excessive memory allocation during collection deserialization through FriendlyByteBuf.readCollection, FriendlyByteBuf.readMap, or related methods. While the issue was exploitable through a Fabric API packet and likely many modded packets across different loaders, NeoForge and Fabric patched the issue for their most active versions (NeoForge: 1.21.1 and 26.1, Fabric: 1.20.1, 1.21.1, 1.21.11, 26.1, 26.2). CrashExploitFixer patches the issue for all versions of Forge, NeoForge, and Fabric and is compatible with their fixes.

Many thanks to Paul for reporting this in private

Blogpost from NeoForge: neoforged.net

Translatable Component Expansion

A denial-of-service vulnerability affecting Minecraft 1.16 through 1.21.4 allowed attackers to craft recursively expanding text components that could inflate into enormous strings during parsing, flattening, or calls such as Component#getString(), leading to severe memory exhaustion and client or server soft-crashes. Newer research showed that specially constructed hover-event payloads could trigger the issue without elevated permissions in vanilla 1.20.5–1.21.4. PaperMC had already protected against this class of exploit for years, while modded environments remain especially vulnerable due to widespread use of FriendlyByteBuf#readComponent() and related component deserialization paths in network packets.

Many thanks to Paul for reporting this in private

Compatibility

Mod Loaders

Client Forge Server

Game Versions

26.3

Recommended Gear

Affiliate

Hardware and extras that pair well with this mod.

As an Amazon Associate I earn from qualifying purchases.

Similar Mods

Included in Modpacks (250)

Show fewer
Trash Panda Twist Trash Panda Twist UnBound World UnBound World WildLouna WildLouna RageCraft Revived RageCraft Revived Electricity Generation Integration Package Electricity Generation Integration Package NO STRINGS ATTACHED A Survival Horror Pack NO STRINGS ATTACHED A Survival Horror Pack Lets Just Say CRAFT - [Christmas] (LJSC) Lets Just Say CRAFT - [Christmas] (LJSC) EVON'S BETTER CRAFT EVON'S BETTER CRAFT Mods MC Mods MC Create: SatisFactory Create: SatisFactory Wither Storm: Dawn of Legends Wither Storm: Dawn of Legends Kameritverse ( Alien Evolution ) Kameritverse ( Alien Evolution ) Beyong Depth (Ru translate) Beyong Depth (Ru translate) HallowScream 4 HallowScream 4 Elarion Elarion ES CRAFT ES CRAFT Naturalist+ Naturalist+ Better Fresh Start (BFS) Better Fresh Start (BFS) Optimization Foundation Optimization Foundation BlockStrike - Modern Multiplayer Shooter BlockStrike - Modern Multiplayer Shooter INSANITY [horror] INSANITY [horror] Optimize My Server! Optimize My Server! SCP: Blackout Protocol SCP: Blackout Protocol Grand Odyssey Grand Odyssey Monumental Experience - Beneath the Surface Monumental Experience - Beneath the Surface Lucky World Invasion (Updates & Tweaks) Lucky World Invasion (Updates & Tweaks) Client Refresh Client Refresh CreateSMP Polska CreateSMP Polska Create Vanilla+ (THEO) Create Vanilla+ (THEO) MysticCraft Divivded Kingdoms MysticCraft Divivded Kingdoms Cobbled Saint Cobbled Saint R.E.A.P  Ultimate edition R.E.A.P Ultimate edition Arknights The Great Tide Arknights The Great Tide Tensura - rebuild Tensura - rebuild terrorcraft - horror pack - v1 terrorcraft - horror pack - v1 Secure Warefare Secure Warefare UnstableCraft SMP UnstableCraft SMP Performance MC Performance MC Immortal Craft Immortal Craft Apocalypse: 28 Blocks Later Apocalypse: 28 Blocks Later Dragonlands Dragonlands The Pond Edition [NEOFORGE] The Pond Edition [NEOFORGE] Redstoner's Paradise Redstoner's Paradise Verity Enhanced Verity Enhanced BEST Vanilla+ BEST Vanilla+ BLACK_MC optimization BLACK_MC optimization Actual Mobs (smarter and stronger mobs) Actual Mobs (smarter and stronger mobs) FEARNIGHT [FORGE JAVA] FEARNIGHT [FORGE JAVA] Camputron Chronicles Camputron Chronicles Sword Last Onlne: The Night fall (war of underworld) Sword Last Onlne: The Night fall (war of underworld) WarCraft (warfare) WarCraft (warfare) Nostalgized Nostalgized Horror Survival ADVANCED Horror Survival ADVANCED Terralish - An Ultimate Boss Fight Experience Terralish - An Ultimate Boss Fight Experience Terraria not MC Terraria not MC Beyond Shenanigans Beyond Shenanigans MessCraft: Explore The World MessCraft: Explore The World Freakland Create2 Freakland Create2 Horror from the Zombie Horde Horror from the Zombie Horde The Corrupted Directory The Corrupted Directory Mechanical suffering Mechanical suffering Nexus RPG Nexus RPG FluxEngine - Ultra Performance & Ultimate FPS Boost FluxEngine - Ultra Performance & Ultimate FPS Boost DropVersion - Plus [FA] DropVersion - Plus [FA] DropVersion - Odyssey [NF] DropVersion - Odyssey [NF] Farlands - Origins Of The Olimpus Farlands - Origins Of The Olimpus EaterSMP EaterSMP Project Z - Zombie Apocalypse Project Z - Zombie Apocalypse ERASED - NEW DAWN ERASED - NEW DAWN Winter Leveling Winter Leveling Ziptastic (Server) Ziptastic (Server) Isekai DX Isekai DX Horrorr Project 2 Horrorr Project 2 Hide Or Hunt [TACZ] Hide Or Hunt [TACZ] Leyendas de Teagarden Pyroven Leyendas de Teagarden Pyroven Havenfall Reimagined Havenfall Reimagined Corroxin's optimizations Corroxin's optimizations Create Beyond the Skies Create Beyond the Skies Natures Odyssey Natures Odyssey Tensura Abyss Tensura Abyss The Adventure of 1000 - Hunters of Evil The Adventure of 1000 - Hunters of Evil DropVersion - Plus [NF] DropVersion - Plus [NF] Gregtech Reverberating Nexus Gregtech Reverberating Nexus Lord Of Family Lord Of Family Zenith+ Zenith+ Kâbus Âlemi Kâbus Âlemi Nomad Medival Nomad Medival Nightmarecraft and Complements Nightmarecraft and Complements New Horizons 3 [Horror] New Horizons 3 [Horror] MewmiCraft MewmiCraft Vile Shadows Vile Shadows one block horror survival one block horror survival Evil larry's playground Evil larry's playground LiteHearted LiteHearted Cradle of the Hosts Cradle of the Hosts Potato RPG - Performance Meets Adventure Potato RPG - Performance Meets Adventure AREACRAFT AREACRAFT Holdy's Chronicle Holdy's Chronicle Community Horror Pack Community Horror Pack OuiOuiCreate OuiOuiCreate

External Resources