Threats tagged 'ghsa-cmv8-j38c-qhxx'

A stack-based buffer overflow vulnerability exists in libsnowflakeclient and the Snowflake PHP PDO Driver during SAML-based authentication. The flaw occurs when a value from the identity provider's HTML response is copied into a fixed-size buffer without length validation. An attacker controlling or redirecting the SAML endpoint could exploit this by sending an oversized response, potentially causing a crash or remote code execution. Fixed versions are libsnowflakeclient 2.11.1 and Snowflake PHP PDO Driver 4.3.0.