VULNERABILITY INTELLIGENCE

CVE-2025-45001

CVSS score7.5 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-06-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-312

Primary references