Description
QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.
Published: 2024-05-18
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Nov 2025 23:30:00 +0100

Type Values Removed Values Added
References

Tue, 04 Nov 2025 19:30:00 +0100

Type Values Removed Values Added
References

Tue, 04 Nov 2025 19:15:00 +0100

Type Values Removed Values Added
First Time appeared Qt qt Network Authorization
CPEs cpe:2.3:a:qt:qt_network_authorization:*:*:*:*:*:*:*:*
Vendors & Products Qt qt Network Authorization
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 14 Jul 2025 15:45:00 +0200

Type Values Removed Values Added
Metrics epss

{'score': 0.00185}

 epss

{'score': 0.00172}

Sat, 05 Jul 2025 16:45:00 +0200

Type Values Removed Values Added
References

Mon, 30 Jun 2025 17:45:00 +0200

Type Values Removed Values Added
First Time appeared Fedoraproject
Fedoraproject fedora
Qt
Qt qt
CPEs cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Vendors & Products Fedoraproject
Fedoraproject fedora
Qt
Qt qt

Wed, 28 May 2025 19:00:00 +0200

Type Values Removed Values Added
References

Thu, 22 May 2025 08:45:00 +0200

Type Values Removed Values Added
Title qtnetworkauth: badly seeded PRNG may result in guessable values
Weaknesses CWE-1390
CWE-337
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 08 Aug 2024 18:00:00 +0200

Type Values Removed Values Added
Weaknesses CWE-335
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Fedoraproject Fedora
Qt Qt Qt Network Authorization
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-11-04T22:06:19.365Z

Reserved: 2024-05-18T00:00:00.000Z

Link: CVE-2024-36048

cve-icon Vulnrichment

Updated: 2025-11-04T22:06:19.365Z

cve-icon NVD

Status : Modified

Published: 2024-05-18T21:15:47.673

Modified: 2026-06-17T07:36:01.763

Link: CVE-2024-36048

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-05-18T00:00:00Z

Links: CVE-2024-36048 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-1390

    Weak Authentication

  • CWE-335

    Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

  • CWE-337

    Predictable Seed in Pseudo-Random Number Generator (PRNG)