What’s Vulnerable › Products

FirebirdSQL firebird vulnerabilities

46 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your FirebirdSQL firebird version is affected

Latest FirebirdSQL firebird vulnerabilities

• CVE-2026-40342 — Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution (CVSS 9.9)
• CVE-2026-35215 — Firebird: DoS via malicious slice descriptor in slice packet (CVSS 7.5)
• CVE-2026-34232 — Firebird: DoS via `op_response` packet from client (CVSS 7.5)
• CVE-2026-33337 — Firebird has a buffer overflow when parsing corrupted slice packets (CVSS 7.5)
• CVE-2026-28224 — Firebird Null Pointer Dereference via CryptCallback causes DOS (CVSS 8.2)
• CVE-2026-28214 — Firebird server hangs when using specific clumplet on batch creation (CVSS 6.5)
• CVE-2026-28212 — Firebird has potential server crash via null pointer dereference when processing op_slice packet (CVSS 7.5)
• CVE-2026-27890 — Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments (CVSS 8.2)
• CVE-2025-65104 — Firebird: Information leak vulnerability in firebird3 client when used with newer server (CVSS 7.5)
• CVE-2025-54989 — Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability (CVSS 7.5)
• CVE-2025-24975 — Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External (CVSS 8.8)
• CVE-2023-41038 — Server crash when using specific form of SET BIND statement (CVSS 7.5)
• CVE-2017-11509 — (CVSS 8.8)
• CVE-2017-6369 — (CVSS 8.8)
• CVE-2016-1569 — (CVSS 6.5)
• CVE-2014-9323 — (CVSS 5.0)
• CVE-2013-2492 — (CVSS 6.8)
• CVE-2012-5529 — (CVSS 3.5)
• CVE-2009-2620 — (CVSS 5.0)
• CVE-2008-0467 — (CVSS 10.0)
• CVE-2008-0387 — (CVSS 7.8)
• CVE-2007-4992 — (CVSS 10.0)
• CVE-2007-5246 — (CVSS 10.0)
• CVE-2007-5245 — (CVSS 10.0)
• CVE-2007-4669 — (CVSS 4.0)