VYPR

PDO Firebird driver

by PHP

CVEs (1)

  • CVE-2025-14179CriMay 10, 2026
    risk 0.57cvss 9.8epss 0.00

    In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when preparing SQL queries. During token-by-token query construction, a string token containing a NUL byte is copied via…