CVE-2026-19795
Qiskit could allow a local attacker to cause a denial of service due to a stack overflow during deserialization of QPY payloads. A malicious QPY payload can trigger a segmentation fault, causing the application to crash when deserializing untrusted input.
- Published Sep 3, 2026
- CVSS 6.2 medium
- 0.1% chance of exploitation in the next 30 days (EPSS)