CVE-2020-13630: apple icloud Use After Free
Vulnerability summary
CVE-2020-13630 is a high (CVSS 7.0) Use After Free vulnerability in apple icloud. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 63.4% of scored vulnerabilities.
Not severe (CVSS 7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 10 · Related 6Timeline
- 27-05-2020PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
1.02%
Chance of exploitation in the next 30 days
Percentile
63%
Versus all other CVEs
30-day change
Decrease -0.01 pp
From 1.03% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Netapp3 products
Oracle3 products
- communications_network_charging_and_control≥ 12.0.0, ≤ 12.0.3 | 6.0.1
- outside_in_technology8.5.4 | 8.5.5
- zfs_storage_appliance_kit8.8
Debian2 products
- sqlite3< 3.32.0-1
- debian_linuxEOL9.0
Broadcom1 product
Brocade1 product
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 19.10 | 20.04
Fedoraproject1 product
- fedoraEOL32
Siemens1 product
Sqlite1 product
- sqlite< 3.32.0
Ubuntu1 product
- sqlite3< 3.11.0-1ubuntu1.5 | < 3.22.0-1ubuntu0.4 | < 3.31.1-4ubuntu0.1
11 vendors · 22 products
References
28 links- bugs.chromium.org/p/chromium/issues/detail?id=1080459X Refsource MISCPermissions RequiredThird Party Advisory
- security.freebsd.org/advisories/FreeBSD-SA-20:22.sqlite.ascVendor AdvisoryX Refsource FREEBSDMitigationThird Party Advisory
lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlMailing ListX Refsource MLISTThird Party Advisory
