ZeroDay Findings
Sign inSign up

Findings

CVE-2020-13632

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Published May 27, 2020 · updated Oct 14, 2026 · sqlite sqlite

ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Timeline

Detection, updates, and resolution for this record.

  1. May 27, 2020 · NIST NVD

    Detected

    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

  2. Oct 14, 2026 · NIST NVD

    Updated

    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

Affected

  • cpe broadcom/fabric operating systemversion unspecified
  • cpe canonical/ubuntu linux16.04
  • cpe canonical/ubuntu linux18.04
  • cpe canonical/ubuntu linux19.10
  • cpe canonical/ubuntu linux20.04
  • cpe debian/debian linux9.0
  • cpe fedoraproject/fedora32
  • cpe netapp/cloud backupversion unspecified
  • cpe netapp/hci compute node firmwareversion unspecified
  • cpe netapp/solidfire, enterprise sds & hci storage nodeversion unspecified
  • cpe siemens/sinec infrastructure network servicesversion unspecified
  • cpe sqlite/sqliteversion unspecified

Sources

  • CVE.orgCVE-2020-13632

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-13632

    30-day exploitation probability 0.6%

    first.org
  • NIST NVDCVE-2020-13632

    ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.

    nvd.nist.gov

References