CVE-2021-3119: Zetetic Sqlcipher

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault.

Affected products

• Zetetic Sqlcipher: from 4.0, before 4.4.3 (fixed in 4.4.3)

Published 2021-03-25. Last modified 2026-06-17.