CVE-2020-13630
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
- CVSS 3.1
- 7.0
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-25)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:icloud
- apple:ipados
- apple:iphone_os
- apple:itunes
- apple:macos
- apple:tvos
- apple:watchos
- broadcom:fabric_operating_system
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- netapp:cloud_backup
- netapp:hci_compute_node_firmware
- netapp:solidfire\,_enterprise_sds_\&_hci_storage_node
- oracle:communications_network_charging_and_control
- oracle:outside_in_technology
- oracle:zfs_storage_appliance_kit
- siemens:sinec_infrastructure_network_services
- sqlite:sqlite