High severity8.6NVD Advisory· Published Feb 21, 2025· Updated Jun 17, 2026
CVE-2025-1403
CVE-2025-1403
Description
Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
qiskitPyPI | >= 0.45.0, < 1.3.0 | 1.3.0 |
qiskit-terraPyPI | >= 0.45.0, <= 0.46.3 | — |
Affected products
4- ghsa-coords2 versions
>= 0.45.0, < 1.3.0+ 1 more
- (no CPE)range: >= 0.45.0, < 1.3.0
- (no CPE)range: >= 0.45.0, <= 0.46.3
- Range: 0.45.0
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-fpmr-m242-xm7xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-1403ghsaADVISORY
- www.ibm.com/support/pages/node/7183868nvdVendor AdvisoryWEB
- github.com/Qiskit/qiskit/security/advisories/GHSA-fpmr-m242-xm7xghsaWEB
- github.com/symengine/symengine/commit/eb3e292bf13b2dfdf0fa1c132944af8df2bc7d51ghsaWEB
News mentions
0No linked articles in our index yet.