# New CVE-2023-4807 detected in openssl

**URL:** <https://discuss.zetetic.net/t/new-cve-2023-4807-detected-in-openssl/6082>\
**Category:** SQLCipher\
**Created:** [September 14, 2023, 2:24am UTC](https://discuss.zetetic.net/t/new-cve-2023-4807-detected-in-openssl/6082 "2023-09-14T02:24:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![decorunchen](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/decorunchen/32/2073_2.png) [@decorunchen](https://discuss.zetetic.net/u/decorunchen)\
**Post date:** [September 14, 2023, 2:24am UTC](https://discuss.zetetic.net/t/new-cve-2023-4807-detected-in-openssl/6082/1 "2023-09-14T02:24:16Z")

</div>

Our scan tool reports vulnerabilities CVE-2023-4807 in openssl 1.1.1q used by SQLCipher 4.5.2.  
Does these vulnerabilities affect the library net.zetetic:androidx-database-sqlcipher?

Thanks

---

<div class="post-metadata">

**Author:** ![developernotes](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/developernotes/32/1309_2.png) [@developernotes](https://discuss.zetetic.net/u/developernotes)\
**Post date:** [September 14, 2023, 1:27pm UTC](https://discuss.zetetic.net/t/new-cve-2023-4807-detected-in-openssl/6082/2 "2023-09-14T13:27:47Z")

</div>

Hi @decorunchen,

SQLCipher is not impacted by CVE-2023-4807 as it does not use the POLY1305 MAC algorithm. Additionally, with the 4.5.5 release of SQLCipher \[1\], the `android-database-sqlcipher` library has been depreated \[1:1\] in favor of the long-term supported `sqlcipher-android` \[2\] library.

* * *

1. [SQLCipher 4.5.5 Release - Zetetic](https://www.zetetic.net/blog/2023/08/31/sqlcipher-4.5.5-release/)

2. [SQLCipher for Android - Zetetic](https://www.zetetic.net/sqlcipher/sqlcipher-for-android/)

---

<div class="post-metadata">

**Author:** ![decorunchen](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/decorunchen/32/2073_2.png) [@decorunchen](https://discuss.zetetic.net/u/decorunchen)\
**Post date:** [September 15, 2023, 1:26am UTC](https://discuss.zetetic.net/t/new-cve-2023-4807-detected-in-openssl/6082/3 "2023-09-15T01:26:35Z")

</div>

Thanks for your prompt response, we will update the latest library and check.