More information about this CVE will likely be available in a few days

Description

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

Related CPE's

Could not find any relations

References

https://f-droid.org/packages/org.liberty.android.fantastischmemo/

https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107021.md

https://github.com/helloworld1/AnyMemo

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-29T15:17:15.903Z

15 hours ago

Last modified

2026-10-29T16:21:34.310Z

14 hours ago