IBM Qiskit SDK

• CVE-2026-19795 Medium 6.2 Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space. 0.3%
• CVE-2026-4870 High 7.5 Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions. 0.3%
• CVE-2025-2000 Critical 9.8 Qiskit SDK code execution 0.8%
• CVE-2025-1403 High 8.6 Qiskit SDK denial of service 0.7%