PT-2024-22685 · Ibm · Qiskit Ibm Runtime

Name of the Vulnerable Software and Affected Versions: Qiskit IBM Runtime versions 0.1.0 through 0.21.1 Description: The issue concerns the deserialization of JSON data using qiskit ibm runtime.RuntimeDecoder, which can lead to arbitrary code execution given a correctly formatted input string. Th...