Sticky Notes & Color Widgets 1.4.2 has a denial of service flaw that triggers a crash when a note contains an excessively long string of characters. By pasting large repeated payloads into the note fields, an attacker can cause the application to become unresponsive, effectively denying legitimate users from creating or accessing notes. The weakness is a classic memory or resource exhaustion vulnerability, classified as CWE-789.

The vulnerability impacts the Sticky Notes Color Widgets application, version 1.4.2. No other versions or products were identified in the current report, so the scope is limited to that specific release.

With a CVSS score of 8.7, the flaw is considered high severity. The EPSS score is not available, and the issue is not listed in CISA's KEV catalog, indicating no widely observed exploits at this time. Exploitation likely requires the attacker to have the ability to enter data into the application – either as a local user or through a remote interface if one exists. Given the lack of hardening against overly large inputs, the vulnerability is exploitable with minimal effort once input capability is obtained.