CVE-2018-20505: SQL Injection
Last updated 25 August 2025
Other sources
SQLite 3.25.2 when queries are run on a table with a malformed PRIMARY KEY allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
— Microsoft
SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service (application crash) by leveraging the ability to run arbitrary SQL statements (such as in certain WebSQL use cases).
— Launchpad
SQLite. Multiple memory corruption issues were addressed with improved input validation.
Credit
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-6235
- CVE-2019-6231
- CVE-2019-6230
- CVE-2019-6224
- CVE-2019-6214
- CVE-2019-6225
- CVE-2019-6210
- CVE-2019-6205
- CVE-2019-6213
- CVE-2019-6209
- CVE-2019-6208
- CVE-2019-6218
- CVE-2018-20346
- CVE-2018-20505
- CVE-2018-20506
- CVE-2019-6227
- CVE-2019-6233
- CVE-2019-6234
- CVE-2019-6229
- CVE-2019-6215
- CVE-2019-6212
- CVE-2019-6216
- CVE-2019-6217
- CVE-2019-6226
- CVE-2019-8570
- CVE-2019-6200
- CVE-2019-6202
- CVE-2019-6221
- CVE-2018-4467
- CVE-2018-4452
- CVE-2019-6219
- CVE-2019-6220
- CVE-2019-6211
- CVE-2019-6206
- CVE-2019-6228
Frequently Asked Questions
What is the vulnerability ID for this SQLite vulnerability?
The vulnerability ID for this SQLite vulnerability is CVE-2018-20505.
What is the severity of CVE-2018-20505?
The severity of CVE-2018-20505 is high.
How does CVE-2018-20505 affect SQLite?
CVE-2018-20505 affects SQLite 3.25.2 when queries are run on a table with a malformed PRIMARY KEY, allowing remote attackers to cause a denial of service (application crash) by running arbitrary SQL statements.
Which software versions are affected by CVE-2018-20505?
The affected software versions by CVE-2018-20505 include SQLite 3.25.2, Apple iPhone OS up to 12.1.3, Apple macOS up to 10.14.2, Apple watchOS up to 5.1.3, Apple iCloud up to 7.10, and Apple iTunes up to 12.9.3.
How can I mitigate the CVE-2018-20505 vulnerability?
To mitigate the CVE-2018-20505 vulnerability, it is recommended to update SQLite to a version that includes the fix or apply the necessary patches provided by the software vendor.