---
id: 5663
title: "Pwning Minecraft: 4-byte heap overflow to RCE"
source_domain: osec.io
source_url: "https://osec.io/blog/minecraft-heap-overflow-to-rce/"
published_at: "2026-06-02T12:00:00Z"
tags: ["rce", "exploit", "memory-corruption", "heap-overflow", "game-security", "minecraft"]
phying_url: "https://phying.com/item/5663"
lang: en
---

# Pwning Minecraft: 4-byte heap overflow to RCE

## Summary

OtterSec achieves RCE in Minecraft Bedrock, turning a 4-byte heap overflow from a malicious server into full client compromise on Windows, bypassing ASLR and Control Flow Guard.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2026-06-02T12:00:00Z
- **Original:** https://osec.io/blog/minecraft-heap-overflow-to-rce/
- **Phying News:** https://phying.com/item/5663