CVE-2020-13632: broadcom fabric_operating_system NULL Pointer Dereference
Vulnerability summary
CVE-2020-13632 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in broadcom fabric_operating_system. EPSS estimates a 0.60% chance of exploitation in the next 30 days, higher than 48.5% of scored vulnerabilities.
Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 10 · Related 6Timeline
- 27-05-2020PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.60%
Chance of exploitation in the next 30 days
Percentile
49%
Versus all other CVEs
30-day change
Increase +0.03 pp
From 0.57% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Netapp3 products
Oracle3 products
- communications_network_charging_and_control≥ 12.0.0, ≤ 12.0.3 | 6.0.1
- outside_in_technology8.5.4 | 8.5.5
- zfs_storage_appliance_kit8.8
Debian2 products
- sqlite3< 3.32.0-1
- debian_linuxEOL9.0
Broadcom1 product
Brocade1 product
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 19.10 | 20.04
Fedoraproject1 product
- fedoraEOL32
Siemens1 product
Sqlite1 product
- sqlite< 3.32.0
Ubuntu1 product
- sqlite3< 3.11.0-1ubuntu1.5 | < 3.22.0-1ubuntu0.4 | < 3.31.1-4ubuntu0.1
10 vendors · 15 products
References
18 links- bugs.chromium.org/p/chromium/issues/detail?id=1080459X Refsource MISCPermissions RequiredThird Party Advisory
- security.freebsd.org/advisories/FreeBSD-SA-20:22.sqlite.ascVendor AdvisoryX Refsource FREEBSDMitigationThird Party Advisory
lists.debian.org/debian-lts-announce/2020/08/msg00037.htmlMailing ListX Refsource MLISTThird Party Advisory
