Authored by Aryan Chehreghani

Instagram App version suffers from a denial of service vulnerability.

# Exploit Title: Instagram App - Denial of Service (PoC)
# Date: 2023-06-13
# Exploit Author: Aryan Chehreghani
# Vendor Homepage:
# Software Link:
# Version:
# Tested on: Android 12

# [ About App ]:

#Instagram is a photo and video sharing social networking service owned by American company Meta Platforms,
#The app allows users to upload media that can be edited with filters and organized by hashtags and geographical tagging,
#Posts can be shared publicly or with preapproved followers. Users can browse other users' #content by tag and location,
#view trending content, like photos, and follow other users to add their content to a personal feed.

# [ Description ]:

#Instagram is sensitive to illegal words, that's why will leave the page and stop after sending.

#Stack Trace:

Package name:
Package version: 368407140
Process name:

Caused by: Illegal character
in scheme name at index 0:
at X.BI5.A00(:1361229)
at X.BpQ.DMb(:73)
at X.6FI.DMd(:7)
at X.6Fn.A03(:10)
at X.110.DMe(:11)
at X.1ly.A03(:25)
at X.1lo.DMe(:11)
at X.11LAOW(:7)
at X.115.A03(:37)
at X.115.A02(:2)
at X.B90.A05(:1350672)
at X.BR2.onClick(:562)
at android.view.View.performClick(

Exception class name:
Source file: URI java
Source class:
Source method: fail
Line number: 2893

# [ POC ]:

# 1.Enter the Instagram app
# 2.In the messages section, select a user to send a message
# 3.Paste -> "" in the "message..." field
# 4.Click 'Send'
# 5.Crashed ;)