An out-of-bounds read vulnerability (CWE-125) exists in siyuan-note versions before 3.6.2. The vulnerability arises when document IDs are retrieved using the /api/file/readDir interface and then the /api/block/getChildBlocks interface is used to access document content. This flaw could allow an attacker to read memory outside the intended bounds, potentially leading to disclosure of sensitive information or system instability. The vulnerability is rated critical with a CVSS 3.1 score of 9.8, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The issue is fixed in version 3.6.2.

Successful exploitation of this out-of-bounds read vulnerability could result in unauthorized disclosure of sensitive information, compromise of data integrity, and disruption of service availability. The critical CVSS score of 9.8 reflects the potential for severe impact across confidentiality, integrity, and availability. No known exploits have been reported in the wild so far.

Upgrade siyuan-note to version 3.6.2 or later, where this vulnerability has been patched. Since this is an application-level vulnerability and the product is not a cloud service, applying the official update is the recommended remediation. Patch status is confirmed by the vendor's versioning information.