Known vulnerabilities in Firebird

Software: Firebird
Software CPE: cpe:2.3:a:firebird_sourceforge_net:firebird:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Firebird Firebird is affected by 16 known vulnerabilities: 4 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126558 - Incorrect Calculation
CVE-2025-65104
CWE-682 Low
No
No
3.0.14 20.04.2026 SB2026042076
SB2026061956
#VU126557 - NULL Pointer Dereference
CVE-2026-28212
CWE-476 Medium
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126556 - Integer overflow
CVE-2026-28214
CWE-190 Low
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126555 - Out-of-bounds write
CVE-2026-27890
CWE-787 High
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126554 - NULL Pointer Dereference
CVE-2026-28224
CWE-476 High
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126553 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-40342
CWE-22 Medium
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126552 - Buffer overflow
CVE-2026-33337
CWE-120 Medium
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126551 - Improper input validation
CVE-2026-34232
CWE-20 Medium
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
#VU126550 - Improper input validation
CVE-2026-35215
CWE-20 Medium
No
No
3.0.14, 4.0.7, 5.0.4 20.04.2026 SB2026042076
SB2026061956
SB2026070123
#VU114772 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-24975
CWE-754 Low
No
No
- 03.09.2025 SB2025090381
SB2025090383
SB2025092567
and 4 more
#VU114438 - NULL Pointer Dereference
CVE-2025-54989
CWE-476 Medium
No
No
3.0.13, 4.0.6, 5.0.3 26.08.2025 SB2025082645
SB2025082749
SB2025090383
and 5 more
#VU126549 - Stack-based buffer overflow
CVE-2023-41038
CWE-121 Low
No
No
4.0.4 20.03.2024 SB2024032079
#VU37356 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-11509
CWE-89 High
No
No
- 28.03.2018 SB2018032829
SB20250908117
#VU39386 - Missing Authorization
CVE-2017-6369
CWE-862 High
No
No
- 24.03.2017 SB2017032411
SB2017022108
SB2017022213
and 2 more
#VU40525 - Improper input validation
CVE-2016-1569
CWE-20 Medium
No
No
- 13.01.2016 SB2016011301
SB2016020809
SB2016020810
and 1 more
#VU43322 - NULL Pointer Dereference
CVE-2012-5529
CWE-476 Low
No
No
- 20.11.2012 SB2012112004