Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

FirebirdSQL — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting FirebirdSQL. AI-powered Chinese analysis, POCs, and references for each vulnerability.

FirebirdSQL serves as a relational database management system primarily used in enterprise applications requiring embedded or client-server database solutions. Historically, vulnerabilities have included remote code execution, SQL injection, and privilege escalation, often stemming from insufficient input validation and authentication flaws. While no major security incidents have been widely documented, the 12 recorded CVEs highlight potential risks in older versions. The database's open-source nature allows for community scrutiny, but deployments should prioritize timely patching and secure configuration to mitigate risks. Its lightweight architecture and cross-platform compatibility remain attractive, though security-conscious implementations must address historical vulnerability patterns.

Top products by FirebirdSQL: firebird
CVE ID Title CVSS Severity Published
CVE-2026-40342 Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution — firebird CWE-22 10.0 Critical 2026-04-17
CVE-2026-35215 Firebird: DoS via malicious slice descriptor in slice packet — firebird CWE-369 7.5 High 2026-04-17
CVE-2026-34232 Firebird: DoS via `op_response` packet from client — firebird CWE-228 7.5 High 2026-04-17
CVE-2026-33337 Firebird has a buffer overflow when parsing corrupted slice packets — firebird CWE-120 7.5 High 2026-04-17
CVE-2026-28224 Firebird Null Pointer Dereference via CryptCallback causes DOS — firebird CWE-476 8.2 High 2026-04-17
CVE-2026-28214 Firebird server hangs when using specific clumplet on batch creation — firebird CWE-190 6.5AI Medium AI 2026-04-17
CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments — firebird CWE-119 8.2 High 2026-04-17
CVE-2026-28212 Firebird has potential server crash via null pointer dereference when processing op_slice packet — firebird CWE-476 7.5 High 2026-04-17
CVE-2025-65104 Firebird: Information leak vulnerability in firebird3 client when used with newer server — firebird CWE-200 7.9 High 2026-04-17
CVE-2025-24975 Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External — firebird CWE-754 7.1 High 2025-08-15
CVE-2025-54989 Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability — firebird CWE-476 5.3 Medium 2025-08-15
CVE-2023-41038 Server crash when using specific form of SET BIND statement — firebird CWE-770 7.5 High 2024-03-20

This page lists every published CVE security advisory associated with FirebirdSQL. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.