CVEvulnerability

CVE-2018-20506

8.1 HIGH Published 2019-04-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-04-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-190

Description

SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries in a "merge" operation that occurs after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases). This is a different vulnerability than CVE-2018-20346.

Affected configurations

• sqlite sqlite (< 3.25.3) • apple iphone os (< 12.1.3) • apple mac os x (< 10.14.3) • apple tvos (< 12.1.2) • apple watchos (< 5.1.3) • apple icloud (<= 7.10) • apple itunes (<= 12.9.3) • opensuse leap 42.3

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References