High severity · published Dec 21, 2018
CVE-2018-20346
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3…
8.1
CVSS
10.2%
EPSS
No
On KEV
Description
SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allowing remote attackers to execute arbitrary code by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases), aka Magellan.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)10.2% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 71.0.3578.80 · source: NVD
DL
Debian Linux · Debian
8.0 · source: NVD
LE
Leap · Opensuse
15.0; 42.3 · source: NVD
LI
Linux · Redhat
6.0 · source: NVD
SQ
Sqlite · Sqlite
before 3.25.3 · source: NVD
In the news
VulnerabilityCritical
ABB B&R Automation Studio
View CSAF
Summary
ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.
The following versions of ABB B&R Automation Studio are affected:
B&R Automation Studio <6.5, 6.5 (CVE-2025-6965, CVE-2025-3277, CVE-2023-7104, CVE-2022-35737, CVE-2020-15358, CVE-2020-13632, CVE-2020-13631, CVE-2020-13630, CVE-2020-13435, CVE-2020-13434, CVE-2020-11656, CVE-2020-11655, CVE-2019-19646, CVE-2019-19645, CVE-2019-8457, CVE-2018-20506, CVE-2018-20505, CVE-2018-20346, CVE-2018-8740, CVE-2017-10989, CVE-2016-6153, CVE-2015-6607, CVE-2015-5895, CVE-2015-3717, CVE-2015-3416)
CVSS
Vendor
Equipment
Vulnerabilities
v3 9.8
ABB
ABB B&R Automation Studio
Numeric Truncation Error, Heap-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Write, NULL Pointer Dereference, Incorrect User Management, Use After Free, Integer Overflow or Wraparound, Improper Check for Unusual or Exceptional Conditions, Uncontrolled Recursion, Out-of-bounds Read, Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Buffer ...
May 21, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-20346
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-20346
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00040.html
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00070.html
Third Party Advisory
http://www.securityfocus.com/bid/106323
Third Party Advisory
https://access.redhat.com/articles/3758321
Third Party Advisory
https://blade.tencent.com/magellan/index_en.html
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1659379
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability