NetSight
IP …
critical9.8

CVE-2024-36048

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses…

Impact

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.

Affected products

VendorProductAffected versions
QtQt
before 5.15.17
from 6.0.0 before 6.2.13
from 6.3.0 before 6.5.6
from 6.6.0 before 6.7.1
FedoraprojectFedora
Versions 39, 40

Weakness classification

CWE-335

References