CVE-2018-13042: 1password

Medium severity, CVSS 5.9. EPSS: 7.9% chance of exploitation in the next 30 days.

The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity com.agilebits.onepassword.filling.openyolo.OpenYoloDeleteActivity or com.agilebits.onepassword.filling.openyolo.OpenYoloRetrieveActivity from an external application (since they are exported), it is possible to crash the 1Password instance.

Affected products

• 1password 1password: version 6.8 only

Published 2018-10-05. Last modified 2026-06-17.