CVE-2026-107021

None

CVSS

—

EPSS

0.2%

Published

Oct 29, 2026

CISA due date

—

The record

Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows unauthorized attackers to arbitrarily read flashcards across the user's entire memorization database.

Affected packages

Ecosystem	Package	Introduced	Fixed