# New vulnerability CVE-2023-2650 in openssl

**URL:** <https://discuss.zetetic.net/t/new-vulnerability-cve-2023-2650-in-openssl/5969>\
**Category:** SQLCipher\
**Created:** [June 12, 2023, 8:11am UTC](https://discuss.zetetic.net/t/new-vulnerability-cve-2023-2650-in-openssl/5969 "2023-06-12T08:11:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@Fred](https://discuss.zetetic.net/u/Fred)\
**Post date:** [June 12, 2023, 8:11am UTC](https://discuss.zetetic.net/t/new-vulnerability-cve-2023-2650-in-openssl/5969/1 "2023-06-12T08:11:00Z")

</div>

Our internal tool reported new vulnerability CVE-2023-2650 in openssl.

Does these vulnerabilities affect the zetetic library net.zetetic:android-database-sqlcipher?

---

<div class="post-metadata">

**Author:** ![developernotes](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/developernotes/32/1309_2.png) [@developernotes](https://discuss.zetetic.net/u/developernotes)\
**Post date:** [June 12, 2023, 1:48pm UTC](https://discuss.zetetic.net/t/new-vulnerability-cve-2023-2650-in-openssl/5969/2 "2023-06-12T13:48:15Z")

</div>

Hello @Fred,

SQLCipher does not use `OBJ_obj2txt`, nor the impacted subsystems within OpenSSL associated with CVE-2023-2650.

---

<div class="post-metadata">

**Author:** ![Fred](https://avatars.discourse-cdn.com/v4/letter/f/db5fbb/32.png) [@Fred](https://discuss.zetetic.net/u/Fred)\
**Post date:** [June 14, 2023, 1:41am UTC](https://discuss.zetetic.net/t/new-vulnerability-cve-2023-2650-in-openssl/5969/3 "2023-06-14T01:41:05Z")

</div>

Thanks for your explanation.