CVE-2026-11573

EUVD-2026-72717
Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
QtCNA
7.1 HIGH
NETWORK
LOW
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
qtqt
6.7.0 ≤
𝑥
< 6.8.2
CNA
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://codereview.qt-project.org/c/qt/qtbase/+/606899