Integer Overflow

ThreeTen backport is vulnerable to integer overflow. The vulnerability is due to missing string validation in the org.threeten.bp.format.DateTimeFormatter::parseCharSequence, ParsePosition method, which returns a StringIndexOutOfBoundsException if the CharSequence is empty...