BlueStacks Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in BlueStacks version 4.80.0.1060. This vulnerability allows local attackers to crash the application by entering excessively large input in the search field. By pasting a buffer of 100,000 'A' characters into the search field and initiating a search, the application is triggered to crash.

Impact

Exploitation of this vulnerability leads to a crash of the BlueStacks application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, first run a Python script that generates a text file containing 100,000 'A' characters. After the file is created, copy the contents of the file to the clipboard. Then, open BlueStacks and paste the clipboard contents into the search field. Click the search button to trigger the crash.