PT-2026-33483

CVE-2026-34232

Published

2026-04-17

Updated

2026-05-15

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Firebird versions prior to 5.0.4 Firebird versions prior to 4.0.7 Firebird versions prior to 3.0.14

Description The xdr status vector() function fails to handle the isc arg cstring type during the decoding of an 'op response' packet. This allows an unauthenticated attacker to cause a server crash by sending a specially crafted 'op response' packet to the server.

Recommendations Update to version 5.0.4 Update to version 4.0.7 Update to version 3.0.14

Exploitability

Exploit

Fix

Impacts

Researchers

Highdyemanov

Vendors

Affected products

Weakness enumeration

CWE-228: Improper Handling of Syntactically Invalid Structure

Related identifiers