Buffer overflow in Cardboardpowered Cardboard
CVE-2026-24794
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src/main/java/org/cardboardpowered/impl/world modules). This vulnerability is associated with program files WorldImpl.Java. This issue affects cardboard: before 1.21.4.
Vulnerability class: Buffer Overflow
EPSS: 0.003 (19.8th percentile) — read the EPSS interpretation.
Affected products
- Cardboardpowered Cardboard — versions 0
Weakness classification (CWE)
References
- cve_disclosure@tech.gov.sg (patch)