{"id":"CVE-2026-11573","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-11573","summary":"Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).","details":"Uncontrolled recursion in Qt's QDomDocument serialization (QtXml) lets deeply nested untrusted XML crash the app via stack exhaustion (DoS only).","published":"2026-09-08T13:17:17.007","modified":"2026-09-08T19:15:18.627","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://codereview.qt-project.org/c/qt/qtbase/+/606899"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-09-08T19:15:18.627"}}