Segmentation Fault Vulnerability in Firebird Relational Database Affecting Multiple Versions

CVE-2025-24975

What is CVE-2025-24975?

Firebird, a widely used relational database, is susceptible to a segmentation fault when ExtConnPoolSize is not properly configured to zero. This vulnerability arises when connections in the external connection pool are not adequately verified, potentially leading to severe server process crashes. An attacker could exploit this issue, particularly affecting secure database transactions involving an unverified CryptCallback interface. The flaw could also disrupt access to both encrypted and unencrypted databases through chained execute statements. Users are advised to update to the latest snapshot versions or set ExtConnPoolSize to zero in the configuration file as a temporary mitigation measure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References