Unrated severityNVD Advisory· Published Oct 29, 2026

CVE-2026-107021

Description

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

Patches

Vulnerability mechanics

References

f-droid.org/packages/org.liberty.android.fantastischmemo/nvd
github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107021.mdnvd

News mentions

No linked articles in our index yet.