Back to Database
Status published
Medium
CVE-2025-54989
Firebird XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability
Vulnerability Description
Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there is an XDR message parsing NULL pointer dereference denial-of-service vulnerability in Firebird. This specific flaw exists within the parsing of xdr message from client. It leads to NULL pointer dereference and DoS. This issue has been patched in versions 3.0.13, 4.0.6, and 5.0.3.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54989
Credits & Attribution
No credits recorded in the NVD database.
References
More from FirebirdSQL
View All →CVE-2025-65104
Firebird: Information leak vulnerability in firebird3 client when used with newer server
High
7.9
CVE-2025-24975
Firebird Non-Authorized Access to Encrypted Database Using Execute Statement on External
High
7.1
CVE-2023-41038
Server crash when using specific form of SET BIND statement
High
7.5
Affected Vendor
FirebirdSQL
View all reports →Affected Software
firebird
Vulnerable Versions:
< 3.0.13, < 4.0.6, < 5.0.3
Timeline
Official Publish:
August 15th, 2025
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L