FirebirdSQL firebird vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 20269

Newest CVEs

• CVE-2026-40342

  Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

  FirebirdSQL · firebird

  Critical10.0
• CVE-2026-35215

  Firebird: DoS via malicious slice descriptor in slice packet

  FirebirdSQL · firebird

  High7.5
• CVE-2026-34232

  Firebird: DoS via `op_response` packet from client

  FirebirdSQL · firebird

  High7.5
• CVE-2026-33337

  Firebird has a buffer overflow when parsing corrupted slice packets

  FirebirdSQL · firebird

  High7.5
• CVE-2026-28224

  Firebird Null Pointer Dereference via CryptCallback causes DOS

  FirebirdSQL · firebird

  High8.2
• CVE-2026-28214

  Firebird server hangs when using specific clumplet on batch creation

  FirebirdSQL · firebird

  Medium6.0
• CVE-2026-27890

  Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments

  FirebirdSQL · firebird

  High8.2
• CVE-2026-28212

  Firebird has potential server crash via null pointer dereference when processing op_slice packet

  FirebirdSQL · firebird

  High7.5
• CVE-2025-65104

  Firebird: Information leak vulnerability in firebird3 client when used with newer server

  FirebirdSQL · firebird

  High7.9
• CVE-2025-24975

  Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External

  FirebirdSQL · firebird

  High7.1