Buffer Overflow in Firebird Open-Source Database Management System
CVE-2026-33337
7.5HIGH
What is CVE-2026-33337?
Firebird is an open-source relational database management system that has a vulnerability in its handling of slice packets. Before versions 5.0.4, 4.0.7, and 3.0.14, the xdr_datum() function fails to check that the length of a cstring conforms to the allocated buffer size. This flaw allows an unauthenticated attacker to send a specially crafted packet to the server, potentially leading to a buffer overflow, which can result in a crash or unauthorized access. Users are advised to update to the latest versions for improved security.
Affected Version(s)
firebird >= 3.0.0, < 3.0.14 < 3.0.0, 3.0.14
firebird >= 4.0.0, < 4.0.7 < 4.0.0, 4.0.7
firebird >= 5.0.0, < 5.0.4 < 5.0.0, 5.0.4