New vulnerability detected in openssl

SQLCipher
1

Hi,
Our scan tool reports vulnerabilities CVE-2025-0306 and CVE-2024-13176 in openssl used by sqlcipher 4.6.1.
Does these vulnerabilities affect net.zetetic:sqlcipher-android?

Thanks,
Fred

2

Hello @Fred,

SQLCipher does not use the Elliptic Curve Digital Signature Algorithm (ECDSA), or the Ruby interpreter so it not impacted by CVE-2025-0306 or CVE-2024-13176. Please note, the latest version of SQLCipher is 4.7.0 [1] so you may wish to schedule an update.

  1. SQLCipher 4.7.0 Release | Zetetic ↩︎