CVE-2018-13042

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity or com.agilebits.onepassword.filling.openyolo.OpenYoloRetrieveActivity from an external application (since they are exported), it is possible to crash the 1Password instance.

• CWE-20

• https://app-updates.agilebits.com/product_history/OPA4Vendor Advisory
• https://www.exploit-db.com/exploits/46165/Third Party Advisory, VDB Entry
• https://www.valbrux.it/blog/2019/01/22/cve-2018-13042-1password-android-7-0-denial-of-service/
• https://app-updates.agilebits.com/product_history/OPA4Vendor Advisory
• https://www.exploit-db.com/exploits/46165/Third Party Advisory, VDB Entry
• https://www.valbrux.it/blog/2019/01/22/cve-2018-13042-1password-android-7-0-denial-of-service/

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-13037An issue was discovered in jpeg-compressor 0.1. The bmp_load…
• CVE-2018-13038OpenSID 18.06-pasca has an Unrestricted File Upload vulnerab…
• CVE-2018-13039OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS)…
• CVE-2018-1304The URL pattern of "" (the empty string) which exactly maps …
• CVE-2018-13040OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerabi…
• CVE-2018-13041The mint function of a smart contract implementation for Lin…7.5
• CVE-2018-13043scripts/grep-excuses.pl in Debian devscripts through 2.18.3 …
• CVE-2018-13045SQL injection vulnerability in the "Bazar" page in Yeswiki C…
• CVE-2018-13049The constructSQL function in inc/search.class.php in GLPI 9.…
• CVE-2018-1305Security constraints defined by annotations of Servlets in A…
• CVE-2018-13050A SQL Injection vulnerability exists in Zoho ManageEngine Ap…
• CVE-2018-13052In CyberArk Endpoint Privilege Manager (formerly Viewfinity)…