CVE-2025-46330

Summary

CVE-2025-46330 is a vulnerability affecting libsnowflakeclient, the Snowflake Connector for C/C++. Versions 0.5.0 to 2.1.9 of this library incorrectly handle malformed requests that result in an HTTP response status code of 400. Instead of recognizing this error and terminating the connection, the application attempts to retry the request up to the maximum number of allowed retries, SF_CON_MAX_RETRY. This behavior can cause the application to hang, potentially leading to denial-of-service conditions. The issue has been resolved with version 2.2.0 of libsnowflakeclient.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.