CVE-2025-65104

high

Description

Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

References

https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg

https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0

Details

Source: Mitre, NVD

Published: 2026-04-17

Updated: 2026-04-17

Risk Information

CVSS v2

Base Score: 5.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:P/I:C/A:P

Severity: Medium

CVSS v3

Base Score: 7.9

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Severity: High

EPSS

EPSS: 0.00013