CVE-2025-46330: Snowflake Connector for C/C++ retries malformed requests
libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SFCONMAXRETRY requests were sent. This issue has been patched in version 2.2.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-46330?
CVE-2025-46330 has been classified with moderate severity, as it can cause application hang-ups.
How do I fix CVE-2025-46330?
To address CVE-2025-46330, upgrade the Snowflake Connector for C/C++ to version 2.2.0 or later.
What software versions are affected by CVE-2025-46330?
CVE-2025-46330 affects Snowflake Connector for C/C++ versions from 0.5.0 to before 2.2.0.
What type of vulnerability is CVE-2025-46330?
CVE-2025-46330 is a vulnerability that leads to incorrect handling of malformed HTTP requests.
What are the risks associated with CVE-2025-46330?
The risks of CVE-2025-46330 include potential application stalls due to excessive retries on malformed requests.