CVE-2025-54989CWE-476

Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability

Medium · published August 15, 2025

CVSS v3.1
5.3
EPSS
1%
Percentile
48.2
In the wild
Unconfirmed
What it is

Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer dereference and DoS. This issue has been patched in versions 3.0.13, 4.0.6, and 5.0.3.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-08-15T15:04Z
EPSS history
Timeline
  • 15 AUG 15:04Z
    Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
    cvelistv5