We have just released SQLCipher 4.7.2 for the following products:
- SQLCipher for Android (All Editions)
- SQLCipher for Android FIPS (Enterprise)
- SQLCipher for React Native (Enterprise)
This update fixes two difficult-to-reproduce defects in SQLCipher for Android 4.7.0’s new Cursor Window implementation. These could potentially cause a crash when a large query result set triggers a window resize with a fragmented heap. The issue could occur unpredictably based on a combination of schema, query result size, device memory state.
We recommend upgrading to the new version if you are using the recently released 4.7.0, even if your application does not seem to be affected during testing, because the problem may only occur under limited conditions. Updating will improve stability and prevent potential crashes. Earlier versions of SQLCipher for Android below 4.7.0 are unaffected.
This update only affects the SQLCipher for Android “wrapper” library packages. The updated packages still include the core SQLCipher 4.7.0 library (i.e. PRAGMA cipher_version will continue to report 4.7.0).