Security Advisory

CVE-2025-1403

8.6
HIGH

Vulnerability Description

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library.
Published Date February 21, 2025
Official Source NIST NVD Advisory