Description ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. Remediation References CVE-2020-13632 Related Vulnerabilities Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.59) WordPress 3.8.x Same Origin Method Execution (SOME) Vulnerability (3.8 - 3.8.13) Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-2355) WordPress Plugin Really Simple Share Cross-Site Request Forgery (2.9.9) WordPress Plugin WP Review Unspecified Vulnerability (5.2.1) Severity Medium Classification CVE-2020-13632 CWE-476 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Tags Missing Update Known Vulnerabilities