Skip to content
OpenAdvisories

Product · IBM

Qiskit SDK

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-116500

    Unbound Recursion in QPY deserialization can lead to denial of service

    IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to cause a denial of service due to unbound recursion during deserialization of untrusted QPY payloads.

    IBM Qiskit SDK
  • Medium 6.2
    CVE-2026-19795

    Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space.

    Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input.

    IBM Qiskit SDK