Security Flaw in Qt Network Authorization Affecting Multiple Versions

CVE-2024-36048

What is CVE-2024-36048?

A vulnerability in the QAbstractOAuth component of Qt Network Authorization allows for insecure random number generation. The flaw arises from the practice of using solely time to seed the pseudo-random number generator (PRNG), making it susceptible to predictability and guessable values. This can potentially lead to security issues such as unauthorized access or manipulation of sensitive data. Affected users should prioritize applying patches or updates that rectify this vulnerability across all impacted Qt versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References