VulnSocial

CVE-2026-34232General(firebirdsql / firebird)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the isc_arg_cstring type when decoding an op_response packet, causing a server crash when one is encountered in the status vector. An unauthenticated attacker can exploit this by sending a crafted op_response packet to the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.

firebirdsql CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-228

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firebird

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
firebirdsql
Products
firebird

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-19: 1Technical Details · 2026-04-19: 104-19
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    General

    CVE-2026-34232 Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the xdr_status_vector() function does not handle the i… https://www.cve.org/CVERecord?id=CVE-2026-34232

    Post summary

    The entry announces CVE‑2026‑34232 as affecting Firebird's xdr_status_vector() function in versions before 5.0.4, 4.0.7, and 3.0.14, with no further details on exploitation, PoC, patches, or mitigations provided.

    0000089
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfirebirdsqlfirebird---

Explore more

Back to dashboardfirebirdsql CVEsfirebird vulnerabilities