CVE-2026-24794

Publication date

2026-01-27 08:21:22

Family

GovTech CSG

State

PUBLISHED

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard (src/main/java/org/cardboardpowered/impl/world modules). This vulnerability is associated with program files WorldImpl.Java. This issue affects cardboard: before 1.21.4.