CVE-2021-47973

High

Published: 16/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Sticky Notes Widget version 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash on iOS devices.

Risk Assessment

This vulnerability may lead to application downtime, affecting service availability for users. If exploited, the organization could experience disruptions and potential data loss.

Recommendation

It is recommended to update the Sticky Notes widget to the latest version to mitigate this vulnerability. Additionally, implementing restrictions on the length of character strings entered in note fields is advisable.

Original NVD description (English source)

Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields. Attackers can generate a payload containing 350000 repeated characters and paste it twice into a new note to trigger an application crash on iOS devices.