PT-2025-5573 · Snowflake · Snowflake Php Pdo Driver

Published 2025-01-29 · Updated 2025-01-29 · CVE-2025-24792

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Snowflake PHP PDO Driver versions 0.2.0 through 3.0.3

Description The issue arises when executing unsupported queries, such as PUT or GET on stages, which causes a signed-to-unsigned conversion error. This error results in the application using the Driver to crash.

Recommendations For versions 0.2.0 through 3.0.3, update to version 3.1.0 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-195

Related Identifiers

CVE-2025-24792

GHSA-F8Q2-7FV5-CG93

Affected Products

Snowflake Php Pdo Driver

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24792.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-24792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24792 · Security Note
• https://github.com/snowflakedb/pdo_snowflake/security/advisories/GHSA-f8q2-7fv5-cg93 · Note
• https://t.me/cvedetector/16696 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1884643584739094982 · Twitter Post
• https://twitter.com/CVEnew/status/1884627971807564158 · Twitter Post