Hi, At a guess (as I can't reproduce) it looks like the issue may be in the adjustForOversetForward method of NavigationUtils.
This looks a little suspect to me: if (controller.absoluteStart + controller.textLength <= range.absoluteEnd && controller.absoluteStart + controller.textLength != range.textFlow.textLength) controller = null; In this case I think would be if (0+8 <= 7 && 0+8 != 8) == false when means control is not set to null, the method returns false and then calls moveForwardHelper. if (!controller) // we're overset, or one position before overset { range.anchorPosition = range.textFlow.textLength; range.activePosition = range.anchorPosition; return true; } return false; Hope that helps someone, Justin