Threats Tagged 'oesa-2026-4496'

CVE-2026-11573 is a denial of service vulnerability in the Qt XML module (QtXml, qtbase) caused by uncontrolled recursion in the QDomDocument/QDomNode serialization path. The functions QDomElementPrivate::save() and QDomNodePrivate::save() recursively call each other without depth limits, leading to stack exhaustion when serializing deeply nested XML documents. This vulnerability affects multiple specific versions of qtbase-opensource-src. It does not allow code execution or memory disclosure. Red Hat has issued a security advisory with updates to address this issue in Red Hat Enterprise Linux 9.8 and related products.