A denial-of-service vulnerability exists in Qt's QDomDocument serialization component (QtXml) due to uncontrolled recursion. This flaw allows an attacker to crash applications by supplying deeply nested untrusted XML, leading to stack exhaustion. The issue affects versions prior to 4.8.7-68.oe2403sp4 and has been assigned CVE-2026-11573. A fix is available in version 4.8.7-68.oe2403sp4.