Sqlcipher

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3119 Mar 25, 23:15 HIGH POC PATCH This Week

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service SQLi Null Pointer Dereference Sqlcipher

NVD GitHub

CVSS 3.1

7.5

EPSS

1.6%

CVE-2020-27207 Nov 26, 17:15 HIGH This Week

Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service SQLi Use After Free Memory Corruption Sqlcipher

NVD GitHub

CVSS 3.1

7.5

EPSS

1.6%

CVE-2021-3119

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service SQLi Null Pointer Dereference +1

NVD GitHub

CVE-2020-27207

EPSS 2% CVSS 7.5

HIGH This Week

Denial Of Service SQLi Use After Free +2

NVD GitHub