Sqlcipher (Zetetic) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 4 known versions, newest CVE from 2026-09-30. Vendor: Zetetic.

CVEs of Sqlcipher

• CVE-2026-51936 - CVSS 2.1 (low), 2026-09-30: Zetetic SQLCipher before 4.15.0 allows SQL injection. The sqlcipher_export convenience function can be used to copy the contents of one attached database into…
• CVE-2021-3119 - CVSS 7.5 (high), 2021-03-25: Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may…
• CVE-2020-27207 - CVSS 7.5 (high), 2020-11-26: Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. A remote denial of service attack…