CVE Intelligence

Ibm Qiskit SDK vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ibm Qiskit SDK: 2 record(s), with affected versions and fixes.

CVE-2026-19795 Medium · 6.2 CWE-502 Sep 3, 2026
Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space.
Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input.
CVE-2026-4870 High · 7.5 CWE-674 Jun 12, 2026
Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.
IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.