CVE-2024-36048

Name of the Vulnerable Software and Affected Versions Qt versions prior to 5.15.17 Qt versions 6.x prior to 6.2.13 Qt versions 6.3.x through 6.5.x prior to 6.5.6 Qt versions 6.6.x through 6.7.x prior to 6.7.1

Description The issue concerns QAbstractOAuth in Qt Network Authorization, where it uses only the time to seed the PRNG, which may result in guessable values.

Recommendations For Qt versions prior to 5.15.17, update to version 5.15.17 or later. For Qt versions 6.x prior to 6.2.13, update to version 6.2.13 or later. For Qt versions 6.3.x through 6.5.x prior to 6.5.6, update to version 6.5.6 or later. For Qt versions 6.6.x through 6.7.x prior to 6.7.1, update to version 6.7.1 or later.