Modscraper Modscraper Minecraft
CrashExploitFixer logo

CrashExploitFixer

Mod

by drexhd

This mod fixes a bunch of crash exploits discovered in Minecraft.

Type

Mod

CurseForge Downloads

25,843,427

CurseForge ID

1079896

Modrinth Downloads

2,969,069

Modrinth ID

Z5GdSH3X

Last Updated

Nov 6, 2026

Description

CrashExploitFixer

The mod currently patches three different exploits for all affected Minecraft versions from 1.14.4 to Latest!

Entity Selector NBT Stack Overflow

A stack overflow vulnerability in Minecraft versions 1.14.4 through the latest release at the time of writing allows attackers to crash servers by abusing deeply nested NBT data inside entity selectors, causing recursive parsing in TagParser to exhaust the JVM stack. While Minecraft 1.21.1 prevents unprivileged players from triggering the issue through entity selectors, operators and creative-mode players can still reproduce the crash on unpatched servers. Notably, PaperMC discovered and patched the underlying parser issue months earlier.

Blogpost from haykam: haykam.com

Excessive Network Object Allocation

A denial-of-service vulnerability affecting Minecraft networking allowed authenticated players to crash servers by sending malicious packets that triggered excessive memory allocation during collection deserialization through FriendlyByteBuf.readCollection, FriendlyByteBuf.readMap, or related methods. While the issue was exploitable through a Fabric API packet and likely many modded packets across different loaders, NeoForge and Fabric patched the issue for their most active versions (NeoForge: 1.21.1 and 26.1, Fabric: 1.20.1, 1.21.1, 1.21.11, 26.1, 26.2). CrashExploitFixer patches the issue for all versions of Forge, NeoForge, and Fabric and is compatible with their fixes.

Many thanks to Paul for reporting this in private

Blogpost from NeoForge: neoforged.net

Translatable Component Expansion

A denial-of-service vulnerability affecting Minecraft 1.16 through 1.21.4 allowed attackers to craft recursively expanding text components that could inflate into enormous strings during parsing, flattening, or calls such as Component#getString(), leading to severe memory exhaustion and client or server soft-crashes. Newer research showed that specially constructed hover-event payloads could trigger the issue without elevated permissions in vanilla 1.20.5–1.21.4. PaperMC had already protected against this class of exploit for years, while modded environments remain especially vulnerable due to widespread use of FriendlyByteBuf#readComponent() and related component deserialization paths in network packets.

Many thanks to Paul for reporting this in private

Compatibility

Mod Loaders

Client Forge Server

Game Versions

26.3

Recommended Gear

Affiliate

Hardware and extras that pair well with this mod.

As an Amazon Associate I earn from qualifying purchases.

Similar Mods

Included in Modpacks (248)

Show fewer
Better MC [FORGE] - BMC4 Better MC [FORGE] - BMC4 Cave Horror Project 1 Cave Horror Project 1 Better MC [FABRIC] BMC2 Better MC [FABRIC] BMC2 DarkRPG - RPG with Magic, Origins, Quests, Adventure DarkRPG - RPG with Magic, Origins, Quests, Adventure Beyond Depth Beyond Depth SteamPunk [LPS] SteamPunk [LPS] Fear Nightfall: Remains of Chaos Fear Nightfall: Remains of Chaos Lucky World Invasion Lucky World Invasion Cave Horror Project 1 Cave Horror Project 1 MC Eternal 2 MC Eternal 2 TerraFirmaGreg-Modern TerraFirmaGreg-Modern Otherworld [Dungeons & Dragons] Otherworld [Dungeons & Dragons] Medieval MC [FORGE] MMC4 Medieval MC [FORGE] MMC4 DarkRPG - RPG with Vampires, Dragons, Magic, Quests, Adventure DarkRPG - RPG with Vampires, Dragons, Magic, Quests, Adventure Ascendra Ascendra Beyond Ascension Beyond Ascension Omnicraft: Ben 10 [Alien Evo] Omnicraft: Ben 10 [Alien Evo] Beyond Cosmo Beyond Cosmo Monumental Experience Monumental Experience KEO RPG optimized KEO RPG optimized Cave Horror Project 2 Cave Horror Project 2 [MODIFIED] Cobblemon: PLUS [MODIFIED] Cobblemon: PLUS Ancient Kingdoms 3 Ancient Kingdoms 3 Better MC Skyblock [BMCS] Better MC Skyblock [BMCS] Medieval MC [FABRIC] MMC2 Medieval MC [FABRIC] MMC2 BETTER FANTASY - Overture BETTER FANTASY - Overture Restless Horizons Restless Horizons Vagrant Saga - RPG Survival Adventure Vagrant Saga - RPG Survival Adventure Euphoric Curiosity Euphoric Curiosity Cookiemon - Pokemon Cobblemon RPG & Cookies Cookiemon - Pokemon Cobblemon RPG & Cookies Beyond Ocean Beyond Ocean Tempest Protocol Tempest Protocol Cave Horror Project 2 Cave Horror Project 2 Calamycraft Calamycraft Compression Compression Danny's AOT - Titan Chronicles Danny's AOT - Titan Chronicles Reign of Nether - BOOSTED Reign of Nether - BOOSTED Desecrated - Flesh and Blood Desecrated - Flesh and Blood antarchy craft antarchy craft Beyond Depth Insanity Beyond Depth Insanity Create Lets Create - Official Server Create Lets Create - Official Server Monumental Experience - In the Sky Monumental Experience - In the Sky Ratufa's Guns n Drugs Ratufa's Guns n Drugs Majnr Skyblock Majnr Skyblock Cave horror optimized (cave horror project 1) Cave horror optimized (cave horror project 1) White Shrimp's Great Adventure White Shrimp's Great Adventure World of Minecraft Normal World of Minecraft Normal Mystic's Monstrosity - Greedy Edition Mystic's Monstrosity - Greedy Edition FEARCRAFT  [FORGE JAVA] FEARCRAFT [FORGE JAVA] Builder's Paradise - Enhanced Edition (BPEE) Builder's Paradise - Enhanced Edition (BPEE) TechRPG - RPG with Tech, Magic, Create, Space Exploration TechRPG - RPG with Tech, Magic, Create, Space Exploration Cobblemon - RPG Edition | Cobblemon & RPG [Cobblemon 1.7.3] Cobblemon - RPG Edition | Cobblemon & RPG [Cobblemon 1.7.3] World of Minecraft - Meidde World of Minecraft - Meidde Monumental Experience - Creatures Across the World Monumental Experience - Creatures Across the World SKYMON - Cobblemon SKYMON - Cobblemon Farming Overloaded Farming Overloaded Reign of Nether - WARFARE Reign of Nether - WARFARE Spell Sword Spell Sword Create: Civilizations - C:C Create: Civilizations - C:C Apocalypse Begins [Zombie Apocalypse] Apocalypse Begins [Zombie Apocalypse] Keo Create Optimized Keo Create Optimized Horrorcraft Reimagined Horrorcraft Reimagined Keo Create Optimized Keo Create Optimized Saturn Saturn Beyond Zombie Beyond Zombie Boosted FPS RPG (Performance Optimized) Boosted FPS RPG (Performance Optimized) World Of Big Horror World Of Big Horror Create Aeronautics Expanded Create Aeronautics Expanded FreakLand FreakLand Survival...but smooth Survival...but smooth AVENTURA - The Adventure Experience AVENTURA - The Adventure Experience TerraKeo TerraKeo MHAC - My Hero Academia Craft MHAC - My Hero Academia Craft Apocalypse Remnants of Earth - A Modern Zombie Apocalypse     [TACZ] [Custom Generation] [Ready to go] Apocalypse Remnants of Earth - A Modern Zombie Apocalypse [TACZ] [Custom Generation] [Ready to go] Lucky World Invasion - Survivor Lucky World Invasion - Survivor Beyond Survival (BYSL) Beyond Survival (BYSL) SkyPlus (w Cobblemon) SkyPlus (w Cobblemon) From the wonderland.jar From the wonderland.jar Creatopia Unbound Creatopia Unbound Monumental Experience VI - Rise of the Dinosaurs Monumental Experience VI - Rise of the Dinosaurs Ancient Cobblemon - Mega Evolutions - Breeding - Quests - Spawn Legendary - MMO RPG - All Pokemons (Cobblemon v1.8) Ancient Cobblemon - Mega Evolutions - Breeding - Quests - Spawn Legendary - MMO RPG - All Pokemons (Cobblemon v1.8) Mine Piece: The Ultimate Journey Mine Piece: The Ultimate Journey DropVersion - Odyssey [FA] DropVersion - Odyssey [FA] tensura exploration tensura exploration KRILLKRAFT KRILLKRAFT endless horror-the ultimate horror endless horror-the ultimate horror Better Aeternium Better Aeternium The Midnight Horrors The Midnight Horrors Monumental Experience - NeoForge Monumental Experience - NeoForge Forge of Eternity Forge of Eternity Better Performance & Fps (BPF) Better Performance & Fps (BPF) Create: Physics And Aeronautics Create: Physics And Aeronautics World War Z - Zombie Evolution World War Z - Zombie Evolution Seven Deadly Sins Chronicles Seven Deadly Sins Chronicles InfinityCraft Ultra InfinityCraft Ultra The Last Horror Experience [REHORRIFIED] The Last Horror Experience [REHORRIFIED] HEROBRİNE EXE HEROBRİNE EXE The Fog Is Coming: Creatures From The Mist The Fog Is Coming: Creatures From The Mist Ruthless Frontiers - Grim Harvest Ruthless Frontiers - Grim Harvest Trash Panda Twist Trash Panda Twist

External Resources