CVE-2026-121925

A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result in memory corruption during SAML-based authentication. During a native SSO/SAML login flow, the affected drivers may have copied a value taken from the identity provider's HTML response into a fixed-size memory buffer without first validating the length of that value. An attacker who controlled or had compromised the configured identity provider — or who was able to redirect the SAML single sign-on endpoint to an attacker-controlled server — might have leveraged this by returning an oversized response, potentially resulting in a crash or, in specific circumstances, remote code execution within the context of the application running the library. The fix is available in libsnowflakeclient version 2.11.1 and Snowflake PHP PDO Driver version 4.3.0. Users must manually upgrade.

• CWE-121

• https://docs.snowflake.com/en/release-notes/clients-drivers/php-pdo-2026#version-430-oct-1-2026
• https://github.com/snowflakedb/libsnowflakeclient/releases/tag/v2.11.1

Published

Nov 4, 2026

Last Modified

Nov 4, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12188A vulnerability was detected in Grit42 Grit up to 0.11.0. Af…6.3
• CVE-2026-12189A flaw has been found in Moovit Bus & Public Transit App 1.1…5.3
• CVE-2026-1219The MP3 Audio Player – Music Player, Podcast Player & Radio …5.3
• CVE-2026-12190A vulnerability has been found in Genspark AI Workspace App …5.3
• CVE-2026-12191A vulnerability was found in Comma AI Openpilot 0.11. This i…7.8
• CVE-2026-12192A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted…8.8
• CVE-2026-121926A vulnerability was detected in yezhihao jt808-server up to …7.3
• CVE-2026-121927A vulnerability has been found in InfiniFlow RAGFlow up to 0…6.3
• CVE-2026-121928A vulnerability was identified in InfiniFlow RAGFlow up to 0…3.5
• CVE-2026-121929A security flaw has been discovered in EmpireSoft EmpireCMS …3.5
• CVE-2026-12193A vulnerability was identified in VS Revo RevoUninstaller 2.…7.8
• CVE-2026-121930A weakness has been identified in Linksys WRT54GL 4.30.18. T…9.1