Macaron Notes Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Macaron Notes version 5.5. This issue allows attackers to crash the application by creating notes with extremely long character strings. By generating a payload of 350,000 repeated characters and pasting it into a note field, the application can be forced to stop functioning.

Impact

Exploitation of this vulnerability leads to a crash of the Macaron Notes application, causing it to stop working entirely.

Reproduction

To reproduce this vulnerability, open Macaron Notes version 5.5 on iOS. Create a new note and run a Python script that generates a text file containing 350,000 repeated characters. Copy the contents of this file and paste it into the note field. The application will crash as a result.