CVE-2025-46330 - CVE House
Back to Database
Status published Low CVE-2025-46330

Snowflake Connector for C/C++ retries malformed requests

Vulnerability Description

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46330

Credits & Attribution

No credits recorded in the NVD database.

References

More from snowflakedb

View All →
CVE-2025-46329
Snowflake Connector for C/C++ inserts client-side encryption key in DEBUG logs
Low 3.3
CVE-2025-46328
NodeJS Driver for Snowflake has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-46327
Go Snowflake Driver has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-46326
Snowflake Connector for .NET has race condition when checking access to Easy Logging configuration file
Low 3.3
CVE-2025-27496
Snowflake JDBC Driver client-side encryption key in DEBUG logs
Low 3.3

Affected Vendor

snowflakedb

View all reports →

Affected Software

libsnowflakeclient
Vulnerable Versions:
>= 0.5.0, < 2.2.0

Timeline

Official Publish: April 29th, 2025
Last Modified: April 29th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-573

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.