CVEvulnerability
CVE-2025-45001
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-312
Description
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
Affected configurations
• numan react-native-keys 0.7.11
Related
Weakness · CWE (1)
- CWE-312 Cleartext Storage of Sensitive Information weakness
References
- https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5 Exploit, Mitigation, Third Party Advisory
- https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001 Third Party Advisory
- https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5 Exploit, Mitigation, Third Party Advisory