PatchFirst · Latest vulnerabilities
Vulnerabilities published for sqlcipher in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack can be performed. For example, a SQL injection can be used to execute the crafted SQL command sequence. After that, some unexpected RAM data is read.
SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode() function when handling invalid rtree tables.
Check your installed stack and versions against the current vulnerability feeds.