CVE-2026-4870 | THREATINT

Description

IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.

PUBLISHED Reserved 2026-03-25 | Published 2026-06-12 | Updated 2026-06-12 | Assigner ibm

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Product status

0.43.0 (semver)

affected

Credits

This vulnerability was reported to IBM by Ali Sherif. finder

References

www.ibm.com/support/pages/node/7276123 vendor-advisory patch

cve.org (CVE-2026-4870)

nvd.nist.gov (CVE-2026-4870)

Download JSON