CVE-2026-35215

Name of the Vulnerable Software and Affected Versions Firebird versions prior to 5.0.4 Firebird versions prior to 4.0.7 Firebird versions prior to 3.0.14

Description The sdl desc() function fails to validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor can be used to calculate the number of slice items, leading to a division by zero. An unauthenticated attacker can trigger a server crash by sending a specially crafted slice packet.

Recommendations Update to version 5.0.4 Update to version 4.0.7 Update to version 3.0.14