Sqlcipher

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3119 HIGH POC PATCH This Week

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Null Pointer Dereference SQLi Denial Of Service Sqlcipher

NVD GitHub

CVSS 3.1

7.5

EPSS

1.6%

CVE-2020-27207 HIGH This Week

Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free SQLi Memory Corruption Sqlcipher

NVD GitHub

CVSS 3.1

7.5

EPSS

1.6%

CVE-2021-3119

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Null Pointer Dereference SQLi Denial Of Service +1

NVD GitHub

CVE-2020-27207

EPSS 2% CVSS 7.5

HIGH This Week

Denial Of Service Use After Free SQLi +2

NVD GitHub