CVE-2020-27207

CVE-2020-27207 affects Zetetic SQLCipher 4.x prior to 4.4.1. The issue is a use-after-free in conjunction with sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c, enabling a remote denial-of-service via a crafted SQL command sequence. Affected component is the SQLCipher/SQLite codepath; impa...

CVE-2021-3119

CVE-2021-3119 affects Zetetic SQLCipher 4.x before 4.4.3. The vulnerability is a NULL pointer dereference in sqlcipher_export (crypto.c) and sqlite3StrICmp (sqlite3.c), which may allow an attacker to trigger a remote denial of service by crafting a SQL sequence that causes a segmentation fault. A...