Advisories · Technology
IBM Qiskit SDK.
Every CVE that names IBM Qiskit SDK among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary().
- IBM Qiskit SDK
- Memory corruption
- CVSS 6.2 Medium
Unbound Recursion in QPY deserialization can lead to denial of service
- IBM Qiskit SDK
- Insecure deserialization
- CVSS 8.4 High
Arbitrary Code Execution in Qiskit SDK QPY Deserialization
- IBM Qiskit SDK
- Insecure deserialization
- CVSS 6.2 Medium
Qiskit SDK is vulnerable when deserializing QPY Files and may overflow the available stack space.
- IBM Qiskit SDK
- Insecure deserialization
- CVSS 7.5 High
Qiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.
- IBM Qiskit SDK
- Denial of service