Skip to content
OpenAdvisories
Low · 3.3 CVE-2025-46330 EUVD-2025-12611

Snowflake Connector for C/C++ retries malformed requests

Published Apr 29, 2025 · Updated Apr 29, 2025 · Assigned by GitHub_M

Description

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

Affected products

VendorProductAffectedFixed
snowflakedb libsnowflakeclient >= 0.5.0, < 2.2.0 —

References