Color Notes 1.4 is vulnerable to a denial‑of‑service attack that allows an attacker to crash the application by submitting an excessively long string into a note field; the flaw arises from the application’s inability to correctly handle extremely large input, with a payload of 350,000 repeated characters pasted twice into a new note causing the process to become unresponsive; this results in loss of application availability for users and is classified as a CWE‑789 vulnerability.

The vulnerability exists in Color Notes 1.4 distributed by the Color Notes vendor; no other versions or products are identified in the available data.

The CVSS score of 8.7 classifies the flaw as high severity; the EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Attackers can invoke the flaw from any UI that accepts new note entry, so the likely attack vector is through normal user interaction with the application’s note creation interface; an attacker only needs the ability to input data and can trigger the crash without additional privileges or system exploitation.