CVE-2026-35215: firebirdsql firebird Divide By Zero
Vulnerability summary
CVE-2026-35215 is a high (CVSS 7.5) Divide By Zero vulnerability in firebirdsql firebird. EPSS estimates a 0.69% chance of exploitation in the next 30 days, higher than 52.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 17-04-2026PublishedVulnerability first disclosed.
- 20-04-2026Last modifiedVulnerability information updated.
Description
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the sdl_desc() function does not validate the length of a decoded SDL descriptor from a slice packet. A zero-length descriptor is later used to calculate the number of slice items, causing a division by zero. An unauthenticated attacker can exploit this by sending a crafted slice packet to crash the server. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.69%
Chance of exploitation in the next 30 days
Percentile
52%
Versus all other CVEs
30-day change
+0.23 pp
From 0.47% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundFirebird
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian2 products
- firebird3.0All versions (No fix recorded) | < 3.0.14.ds7-1
- firebird4.0All versions (No fix recorded) | < 4.0.7.3271.ds6-1
Ubuntu2 products
- firebird3.0All versions (No fix recorded)
- firebird4.0All versions (No fix recorded)
Firebirdsql1 product
- firebird≥ 3.0.0, < 3.0.14 | ≥ 4.0.0, < 4.0.7 | ≥ 5.0.0, < 5.0.4
3 vendors · 5 products
References
7 links- github.com/FirebirdSQL/firebird/security/advisories/GHSA-g99w-prq5-29c6X Refsource CONFIRMREPORTExploitVendor Advisory
