CVE-2025-65104: Firebird: Information leak vulnerability in firebird3 client when used with newer server
Published Apr 17, 2026
·Updated
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or higher.
Affected Software
2 affected components
Firebird Firebird client library>=3.0.0<4.0.0
firebirdsql Firebird<3.0.14
Event History
Apr 17, 2026
CVE Published
via MITRE·05:47 PM
Data Sourced
via MITRE·05:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65104?
CVE-2025-65104 is classified as a medium severity vulnerability.
2
How do I fix CVE-2025-65104?
To fix CVE-2025-65104, upgrade the Firebird client library to version 4.0.0 or higher.
3
What software is affected by CVE-2025-65104?
CVE-2025-65104 affects the Firebird client library versions between 3.0.0 and 4.0.0.
4
What type of vulnerability is CVE-2025-65104?
CVE-2025-65104 is an information leak vulnerability.
5
In which environments will CVE-2025-65104 occur?
CVE-2025-65104 occurs when the Firebird 3 client communicates with Firebird 4 or higher servers.