Zetetic · Sqlcipher · CVE-2026-51936
**Name of the Vulnerable Software and Affected Versions**
Zetetic SQLCipher versions prior to 4.15.0
**Description**
An issue exists in the `sqlcipher export()` convenience function, which is used to copy contents between attached databases, typically for converting between plaintext and encrypted formats. Because the function performs dynamic schema manipulation, it temporarily disables defensive restrictions. Improper handling of the source database name parameter allows a caller to provide a crafted name to execute statements that would normally be blocked by defensive mode. This can lead to direct modifications of the `sqlite schema` table and database corruption.
**Recommendations**
Update to version 4.15.0.