Description ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. Remediation References CVE-2020-13632 Related Vulnerabilities Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-29790) ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2026-50742) Oracle JRE CVE-2013-5787 Vulnerability (CVE-2013-5787) WordPress Plugin qTranslate Cross-Site Scripting (2.5.39) Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-33704) Severity Medium Classification CVE-2020-13632 CWE-476 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Tags Missing Update Known Vulnerabilities