Critical severity9.8NVD Advisory· Published May 18, 2024· Updated Jun 17, 2026

CVE-2024-36048

Description

QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qt/Qt
cpe:2.3:a:qt:qt:*:*:*:*:*:*:*:*
Range: <5.15.17
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Qt/Qt Network Authorizationdescription
osv-coords6 versions
pkg:rpm/opensuse/libqt5-qtnetworkauth&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/qt6-networkauth&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/qt6-networkauth-docs&distro=openSUSE%20Leap%2015.5 pkg:rpm/suse/libqt5-qtnetworkauth&distro=SUSE%20Package%20Hub%2015%20SP5 pkg:rpm/suse/qt6-networkauth&distro=SUSE%20Package%20Hub%2015%20SP5 pkg:rpm/suse/qt6-networkauth-docs&distro=SUSE%20Package%20Hub%2015%20SP5
< 5.15.2+kde2-bp155.3.3.1+ 5 more
- (no CPE)range: < 5.15.2+kde2-bp155.3.3.1
- (no CPE)range: < 6.4.2-bp155.2.3.1
- (no CPE)range: < 6.4.2-bp155.2.3.1
- (no CPE)range: < 5.15.2+kde2-bp155.3.3.1
- (no CPE)range: < 6.4.2-bp155.2.3.1
- (no CPE)range: < 6.4.2-bp155.2.3.1

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2024-36048

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions