Home

Description

Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

PUBLISHED Reserved 2025-11-17 | Published 2026-04-17 | Updated 2026-04-17 | Assigner GitHub_M




HIGH: 7.9CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Problem types

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Product status

< 4.0.0
affected

References

github.com/...rebird/security/advisories/GHSA-mfpr-9886-xjhg

github.com/FirebirdSQL/firebird/releases/tag/v4.0.0

cve.org (CVE-2025-65104)

nvd.nist.gov (CVE-2025-65104)

Download JSON