Vulnerability details
CVE-2025-65104
FirebirdSQL firebird
Firebird: Information leak vulnerability in firebird3 client when used with newer server
CVSS 3.1
7.9High
Official description
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.9High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| FirebirdSQL | firebird | < 4.0.0 | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg x_refsource_CONFIRM
- https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0 x_refsource_MISC
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-04-17
- Last updated
- 2026-04-17
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.18%
Probability of exploitation in 30 days
8.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor