VULNERABILITY INTELLIGENCE
CVE-2026-19795
CVSS score6.2 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input.
Weakness classification
- psirt@us.ibm.com: CWE-502