PT-2026-102968 · Zetetic · Sqlcipher
CVSS v4.0
2.1
Low
| Vector | AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Zetetic SQLCipher versions prior to 4.15.0
Description
An issue exists in the
sqlcipher export() convenience function, which is used to copy contents between attached databases, typically for converting between plaintext and encrypted formats. Because the function performs dynamic schema manipulation, it temporarily disables defensive restrictions. Improper handling of the source database name parameter allows a caller to provide a crafted name to execute statements that would normally be blocked by defensive mode. This can lead to direct modifications of the sqlite schema table and database corruption.Recommendations
Update to version 4.15.0.
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sqlcipher