CVE-2021-47969

High

Published: 16/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Color Notes version 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.

Risk Assessment

This vulnerability may lead to application downtime, affecting user productivity and potentially causing losses for the organization.

Recommendation

It is recommended to update the Color Notes application to the latest version to mitigate this vulnerability and to monitor application usage for potential attack attempts.

Original NVD description (English source)

Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350,000 repeated characters and paste it twice into a new note to cause the application to stop responding.