Vulnerabilities

TI-2026-37724 CVE-2026-51936 · GHSA-7w4j-532w-pgpj

SQL injection in Zetetic SQLCipher

LOW 18

Zetetic SQLCipher before 4.15.0 allows SQL injection.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.0018 Published 2026-09-30 Fixed in 4.15.0 CWE-89

TI-2021-02213 CVE-2021-3119 · GHSA-r659-6fh2-v3gv

LOW 36

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01558 Published 2021-03-25 No fix listed CWE-476

TI-2020-16536 CVE-2020-27207 · GHSA-x3vj-997j-97hq

LOW 36

Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01592 Published 2020-11-26 No fix listed CWE-416