What is CVE-2025-46330?

CVE-2025-46330 is a low-severity vulnerability in Snowflake Connector For C\/c\+\+, classified under CWE-573. CVSS score: 3.3/10. Published 2025-04-29.

How severe is CVE-2025-46330?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Snowflake Connector For C\/c\+\+

CVE-2025-46330

libsnowflakeclient is the Snowflake Connector for C/C++. Versions starting from 0.5.0 to before 2.2.0, incorrectly treat malformed requests that caused the HTTP response status code 400, as able to be retried. This could hang the application until SF_CON_MAX_RETRY requests were sent. This issue has been patched in version 2.2.0.

EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Snowflake Connector_for_c\/c\+\+
Snowflakedb Libsnowflakeclient — versions >= 0.5.0, < 2.2.0

Weakness classification (CWE)

CWE-573

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
security-advisories@github.com (Patch, x_refsource_MISC)

Frequently asked questions

What is CVE-2025-46330?: CVE-2025-46330 is a low-severity vulnerability in Snowflake Connector For C\/c\+\+, classified under CWE-573. CVSS score: 3.3/10. Published 2025-04-29.
How severe is CVE-2025-46330?: Low severity. CVSS v3 base score is 3.3 out of 10.