Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields w…

CVE-2025-65104 affects Firebird open-source relational database management system. The vulnerability occurs in FB3 client library versions when communicating with FB4 or higher servers. Incorrect data length values are placed into XSQLDA fields during client-server communication. This results in an information disclosure vulnerability that could leak sensitive data. The issue is resolved by upgrading to FB4 client library or higher versions. The vulnerability has been assigned a high criticality rating.