Skip to content

Known vulnerabilities in IBM Qiskit SDK

Is your version affected?

CVE Summary Score Published
CVE-2026-19795 Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY… 6.2 Medium Sep 3, 2026
CVE-2026-4870 IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of… 7.5 High Jun 12, 2026
CVE-2025-2000 A maliciously crafted QPY file can potential execute arbitrary-code embedded in the payload without privilege escalation… 9.8 Critical Mar 14, 2025
CVE-2025-1403 Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted… 8.6 High Feb 21, 2025

Other IBM products