CVE-2025-65104

Published: Apr 17, 2026Modified: Apr 24, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

Affected (1)

Products: Firebirdsql: Firebird

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Firebirdsql Firebird	Before 3.0.14

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0

Source: security-advisories@github.com

ProductRelease Notes

https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg

Source: security-advisories@github.com

Vendor Advisory

Timeline

No history available yet.