PT-2026-33475 · Firebird+1 · Firebird Client Library+1

CVE-2025-65104 · Published 2026-04-17 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v3.1

7.9

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Firebird client library version FB3

Description The FB3 client library places incorrect data length values into XSQLDA fields when communicating with Firebird servers version FB4 or higher, which leads to an information leak.

Recommendations Upgrade to the FB4 client or higher.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-07785

CVE-2025-65104

GHSA-MFPR-9886-XJHG

OESA-2026-2013

OESA-2026-2014

OESA-2026-2015

OESA-2026-2016

OESA-2026-2017

SUSE-SU-2026:1868-1

Affected Products

Firebird Client Library

Red Os

References · 36

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65104.json · Exploit
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-mfpr-9886-xjhg · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-65104 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-65104 · Security Note
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-65104 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-65104 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07785 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28224 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-65104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28212 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34232 · Security Note