---
cve: "CVE-2026-11573"
severity: "HIGH"
cvss: 7.1
epss: "39%"
vendor: "Qt"
kev: false
exploited: false
published: "2026-09-08 13:17:17"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-18T04:55:59+02:00"
---

# CVE-2026-11573

> 7.1 HIGH

## Beschreibung

Uncontrolled recursion (CWE-674) in the QDomDocument/QDomNode serialization path of the Qt XML module (QtXml, qtbase). QDomElementPrivate::save() and QDomNodePrivate::save() recurse mutually, consuming one stack frame per level of element nesting with no depth limit, no configurable bound and no error return. A document with deeply nested elements parses successfully but exhausts the call stack and terminates the process when serialized. Reachable via QDomDocument::toByteArray() (Qt 4.0 and later), QDomDocument::toString(), QDomDocument::toCString(), QDomNode::save(), and operator

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |

## Schwachstellen-Klasse

- **CWE-674** — Uncontrolled Recursion
  The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

## Angriffsmuster (CAPEC)

- [CAPEC-230 — Serialized Data with Nested Payloads](https://capec.mitre.org/data/definitions/230.html) _(Severity: High)_
- [CAPEC-231 — Oversized Serialized Data Payloads](https://capec.mitre.org/data/definitions/231.html) _(Severity: High)_

## Referenzen

- <https://codereview.qt-project.org/c/qt/qtbase/+/606899>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-11573) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_