CVE-2026-4870

Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions. PUBLISHED

Description (CNA)

IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.

Affected (CNA)

Vendor / product	Versions
IBM / Qiskit SDK	affected 0.43.0 through 2.5.0

CWE

No CWE identifiers supplied.

References

https://www.ibm.com/support/pages/node/7276123

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.