CVE-2018-13042 – 1Password < 7.0 - Denial of Service

https://notcve.org/view.php?id=CVE-2018-13042

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity or com.agilebits.onepassword.filling.openyolo.OpenYoloRetrieveActivity from an external application (since they are exported), it is possible to crash the 1Password instance. La aplicación 1Password 6.8 para Android se ha visto afectada por una vulnerabilidad de denegación de servicio (DoS). Al comenzar las actividades com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity o com.agilebits.onepassword.filling.openyolo.OpenYoloRetrieveActivity desde una aplicación externa (ya que están exportadas), es posible provocar el cierre inesperado de la instancia de 1Password. 1Password versions prior to 7.0 suffer from a denial of service vulnerability. • https://www.exploit-db.com/exploits/46165 https://app-updates.agilebits.com/product_history/OPA4 https://www.valbrux.it/blog/2019/01/22/cve-2018-13042-1password-android-7-0-denial-of-service • CWE-20: Improper Input Validation •