← Back

CVE-2026-4870

nvd nist
Published: Jun 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.

Affected (2)

Ibm
1 product
Qiskit Software Development Kit
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Qiskit Software Development Kit
From 0.43.0 to 1.4.6
Qiskit Software Development Kit
From 2.0.0 to 2.4.2

Related CWEs

CWE-674
Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.