Is CVE-2020-13630 actively exploited?

No active exploitation of CVE-2020-13630 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-13630 be exploited remotely?

No. CVE-2020-13630 requires local access to exploit.

What is the CVSS score of CVE-2020-13630?

CVE-2020-13630 has a CVSS score of 7.0 (HIGH).

HOME VULNERABILITIESCVE-2020-13630

HIGH

CVE-2020-13630

CWE-416Published: May 27, 2020· Updated: Jun 17, 2026

7.0

CVSS v3.1

Official Description

ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.

NVD Source

Technical Analysis

CVE-2020-13630 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.0.

From a weakness classification perspective (CWE-416): Use-after-free vulnerabilities involve accessing memory after it has been freed, often enabling arbitrary code execution.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges Req.Low

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

Apple7 product(s)

iclouditunesipadosiphone osmacostvoswatchos

brocade1 product(s)

fabric operating system

Canonical1 product(s)

ubuntu linux

Debian1 product(s)

debian linux

Fedora1 product(s)

fedora

netapp4 product(s)

cloud backupsolidfire\, enterprise sds \& hci storage nodehci compute node firmwarehci compute node

Oracle3 product(s)

communications network charging and controloutside in technologyzfs storage appliance kit

siemens1 product(s)

sinec infrastructure network services

sqlite1 product(s)

sqlite

Source: NVD CPE · 25 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

PATCHhttps://sqlite.org/src/info/0d69f76f0865f962

PATCHhttps://usn.ubuntu.com/4394-1/

PATCHhttps://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf

PATCHhttps://sqlite.org/src/info/0d69f76f0865f962

PATCHhttps://usn.ubuntu.com/4394-1/

ADVISORYhttp://seclists.org/fulldisclosure/2020/Dec/32

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/19

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/20

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/22

ADVISORYhttps://bugs.chromium.org/p/chromium/issues/detail?id=1080459

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/08/msg00037.html

ADVISORYhttps://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc

ADVISORYhttps://security.gentoo.org/glsa/202007-26

ADVISORYhttps://security.netapp.com/advisory/ntap-20200608-0002/

ADVISORYhttps://support.apple.com/kb/HT211843

ADVISORYhttps://support.apple.com/kb/HT211844

ADVISORYhttps://support.apple.com/kb/HT211850

ADVISORYhttps://support.apple.com/kb/HT211931

ADVISORYhttps://support.apple.com/kb/HT211935

ADVISORYhttps://support.apple.com/kb/HT211952

ADVISORYhttps://www.oracle.com/security-alerts/cpujul2020.html

ADVISORYhttps://www.oracle.com/security-alerts/cpuoct2020.html

ADVISORYhttp://seclists.org/fulldisclosure/2020/Dec/32

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/19

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/20

ADVISORYhttp://seclists.org/fulldisclosure/2020/Nov/22

ADVISORYhttps://bugs.chromium.org/p/chromium/issues/detail?id=1080459

ADVISORYhttps://lists.debian.org/debian-lts-announce/2020/08/msg00037.html

ADVISORYhttps://security.FreeBSD.org/advisories/FreeBSD-SA-20:22.sqlite.asc

ADVISORYhttps://security.gentoo.org/glsa/202007-26

ADVISORYhttps://security.netapp.com/advisory/ntap-20200608-0002/

ADVISORYhttps://support.apple.com/kb/HT211843

ADVISORYhttps://support.apple.com/kb/HT211844

ADVISORYhttps://support.apple.com/kb/HT211850

ADVISORYhttps://support.apple.com/kb/HT211931

ADVISORYhttps://support.apple.com/kb/HT211935

ADVISORYhttps://support.apple.com/kb/HT211952

ADVISORYhttps://www.oracle.com/security-alerts/cpujul2020.html

ADVISORYhttps://www.oracle.com/security-alerts/cpuoct2020.html

News & Research Mentioning CVE-2020-13630

ABB B&R Automation Studio

CISA Alerts· May 21, 2026

View CSAF Summary ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution. The following versions of ABB B&R Automation Studio are affected: B&R Automation Studio <6.5, 6.5 (CVE-2025-6965, CVE-2025-3277, CVE-2023-7104, CVE-2022-35737, CVE-2020-15358, CVE-2020-13632, CVE-2020-13631, CVE-2020-13630, CVE-2020-13435, CVE-2020-13434, CVE-2020-11656, CVE-2020-11655, CVE-2019-19646, CVE-2019-19645, CVE-2019-845 [xlite_meta score:73 src:CISA Alerts xlite_fp:4bd9915ab1cbc0373abcc9a511995a7eda05ff04b973f92e9ad91fab560f97da]