CVE-2026-107021: Security vulnerability

Published Oct 29, 2026

Updated

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

Event History

Oct 29, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:17 PM

Description

Frequently Asked Questions

Who can access the flashcard data?

Unauthorized attackers can arbitrarily read flashcards across the user's entire memorization database through the CardProvider content provider component.

What information may be exposed?

The exposed data is flashcard content from the user's entire memorization database.

Which release is identified as affected?

The issue is identified in helloworld1 AnyMemo with versionCode 20260730.

CVE-2026-107021: Security vulnerability

Event History

Frequently Asked Questions

Who can access the flashcard data?

What information may be exposed?

Which release is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Who can access the flashcard data?

What information may be exposed?

Which release is identified as affected?