CVE-2026-28214CWE-190CWE-835

Firebird server hangs when using specific clumplet on batch creation

Medium · published April 17, 2026

CVSS v4.0
6.0
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize() function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges on any table can exploit this via a crafted Batch Parameter Block to cause a denial of service against the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
EPSS
0.00592 · 47.6th percentile
Weaknesses
CWE-190 · Integer Overflow or Wraparound; CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2026-04-17T18:35Z
EPSS history
Timeline
  • 17 APR 18:35Z
    Firebird server hangs when using specific clumplet on batch creation
    cvelistv5