← back
CVE-2025-45001

CVE-2025-45001

CVSS 7.5 HIGHEPSS 0.2%CWE-312
react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001