High severity · published Apr 17, 2026
CVE-2025-65104
Firebird: Information leak vulnerability in firebird3 client when used with newer server
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
firebird · FirebirdSQL
< 4.0.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-65104
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-65104
Product
https://github.com/FirebirdSQL/firebird/releases/tag/v4.0.0
Vendor Advisory
https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg
More from firebird
9.9
CVE-2026-40342
Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
8.8
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
8.8
CVE-2017-11509
An authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL statement
8.8
CVE-2017-6369
Insufficient checks in the UDF subsystem in Firebird 2.5.x before 2.5.7 and 3.0.x before 3.0.2 allow remote authenticated users to execute code by using a 'system' entrypoint from…
8.2
CVE-2026-28224
Firebird Null Pointer Dereference via CryptCallback causes DOS