CVE-2025-45001

High CVSS: 7.5

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

Vendor

Numan

Product

React-native-keys

CWE

CWE-312

Yayın Tarihi

2025-06-09 17:15:29

Güncelleme

2025-06-23 14:18:43

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-312 React-native-keys HIGH Numan 2025

Referanslar

https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5 https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001 https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5