A vulnerability was found in CardboardPowered cardboard up to 1.21.3 and classified as critical. Affected by this issue is some unknown functionality of the file src/main/java/org/cardboardpowered/impl/world. The manipulation results in memory corruption.
This vulnerability was named CVE-2026-24794. The attack may be performed from remote. There is no available exploit.
It is suggested to upgrade the affected component.
