High severity7.9NVD Advisory· Published Apr 17, 2026· Updated Apr 24, 2026
CVE-2025-65104
CVE-2025-65104
Description
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhgnvdVendor Advisory
- github.com/FirebirdSQL/firebird/releases/tag/v4.0.0nvdProductRelease Notes
News mentions
0No linked articles in our index yet.