CVE-2026-28212

Name of the Vulnerable Software and Affected Versions Firebird versions prior to 6.0.0 Firebird versions prior to 5.0.4 Firebird versions prior to 4.0.7 Firebird versions prior to 3.0.14

Description An unauthenticated attacker can cause a server crash by sending a crafted packet to the server port. This occurs when processing an 'op slice' network packet, where the server passes an unprepared structure containing a null pointer to the SDL info() function, leading to a null pointer dereference.

Recommendations Update to version 6.0.0 Update to version 5.0.4 Update to version 4.0.7 Update to version 3.0.14