High severity7.5NVD Advisory· Published Jun 12, 2026· Updated Jun 16, 2026

CVE-2026-4870

Description

IBM Qiskit SDK 0.43.0 through 2.5.0 could allow an attacker to trigger a segmentation fault leading to a denial of service due to uncontrolled recursion in the parser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pypi/Qiskitinferred
Range: >=0.43.0,<=2.5.0
Package: https://pypi.org/project/qiskit
IBM/Qiskit Software Development Kit
cpe:2.3:a:ibm:qiskit_software_development_kit:*:*:*:*:*:*:*:*
Range: >=0.43.0,<1.4.6
IBM/Qiskit SDKllm-fuzzy
Range: >=0.43.0 <=2.5.0

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7276123nvdVendor Advisory

News mentions

IBM: Six CVEs Across Five Products Disclosed in Two-Day Batch
Vypr Intelligence · Jun 12, 2026

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000