CVE-2026-116501

The IBM Qiskit SDK (versions v2.4.0 through v2.6.1 ) is vulnerable to an out-of-bounds write (CWE-787) when using the C API function qk_circuit_inst_unitary() . The root cause is improper input validation when accessing a corrupted unitary matrix, which can occur if a logic fault leaves the circu...