Firebird is an open-source relational database management system.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 17, 2026 · NIST NVD

   Detected

   Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

2. Oct 7, 2026 · NIST NVD

   Updated

   Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.

Affected

• cpe firebirdsql/firebirdversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2025-65104

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-65104

  Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the

  nvd.nist.gov

References

• Product · github.com
• Vendor Advisory · github.com