Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.7

CVE-2021-47969: Color Notes 1.4 Crashes from Very Long Text Inputs

CVE-2021-47969 · published 5 months ago
Summary

Color Notes 1.4 is affected by a denial of service issue. This means that an attacker can make the application stop working by entering a very long string of characters into a note. To protect your system, consider updating to a newer version of Color Notes that fixes this issue.

Original advisory text
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a pa...
Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.7 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-789Memory Allocation with Excessive Size Value
Timeline
Published16 May 2026
Updated3 Nov 2026
First seen16 May 2026
Sources
Track software like this
Free during beta