CVE-2026-107021

EUVD-2026-113181
Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://f-droid.org/packages/org.liberty.android.fantastischmemo/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107021.md
https://github.com/helloworld1/AnyMemo