CVE-2025-24975

Firebird is a relational database. Prior to snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609, Firebird is vulnerable if ExtConnPoolSize is not set equal to 0. If connections stored in ExtConnPool are not verified for presence and suitability of the CryptCallback interface is used when created versus what is available could result in a segfault in the server process. Encrypted databases, accessed by execute statement on external, may be accessed later by an attachment missing a key to that database. In a case when execute statement are chained, segfault may happen. Additionally, the segfault may affect unencrypted databases. This issue has been patched in snapshot versions 4.0.6.3183, 5.0.2.1610, and 6.0.0.609 and point releases 4.0.6 and 5.0.2. A workaround for this issue involves setting ExtConnPoolSize equal to 0 in firebird.conf.

• CWE-754

• https://github.com/FirebirdSQL/firebird/commit/658abd20449f72097fbbce57e8e6ae42ff837fb6Patch
• https://github.com/FirebirdSQL/firebird/issues/8429Issue Tracking
• https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-fx9r-rj68-7p69Mitigation, Vendor Advisory
• https://www.vicarius.io/vsociety/posts/cve-2025-24975-detect-vulnerable-firebirdExploit, Third Party Advisory
• https://www.vicarius.io/vsociety/posts/cve-2025-24975-mitigate-firebird-vulnerabilityExploit, Third Party Advisory

Published

Aug 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2497A maliciously crafted DWG file, when parsed through Autodesk…7.8
• CVE-2025-24970Netty, an asynchronous, event-driven network application fra…7.5
• CVE-2025-24971DumpDrop is a stupid simple file upload application that pro…9.5
• CVE-2025-24972Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2025-24973Concorde, formerly know as Nexkey, is a fork of the federate…9.3
• CVE-2025-24974DataEase is an open source business intelligence and data vi…6.5
• CVE-2025-24976Distribution is a toolkit to pack, ship, store, and deliver …6.6
• CVE-2025-24977OpenCTI is an open cyber threat intelligence (CTI) platform.…9.1
• CVE-2025-2498An improper access control in Gitlab EE affecting all versio…4.3
• CVE-2025-24980pimcore/admin-ui-classic-bundle provides a Backend UI for Pi…5.3
• CVE-2025-24981MDC is a tool to take regular Markdown and write documents i…9.3
• CVE-2025-24982Cross-site request forgery vulnerability exists in Activity …4.3