CVE-2026-24794

Critical

Published: 27/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Improper restriction of memory buffer operations in the cardboard project (WorldImpl modules) related to WorldImpl.Java files. Versions before 1.21.4 are affected.

Risk Assessment

An attacker could exploit the flaw to corrupt memory, potentially leading to unexpected behavior or code execution.

Recommendation

Update cardboard to version 1.21.4 or later.

Original NVD description (English source)

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src/main/java/org/cardboardpowered/impl/world modules). This vulnerability is associated with program files WorldImpl.Java. This issue affects cardboard: before 1.21.4.