CVE-2025-45001

Published: Jun 9, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary. Attackers can extract these secrets using basic static analysis tools.

Affected (1)

Products: Numan: React Native Keys

Numan

1 product

React Native Keys

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Numan React Native Keys	Version 0.7.11

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (3)

https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5

Source: cve@mitre.org

ExploitMitigationThird Party Advisory

https://github.com/ch3tanbug/vulnerability-research/tree/main/CVE-2025-45001

Source: cve@mitre.org

Third Party Advisory

https://gist.github.com/ch3tanbug/44aedff79dd5d2d6beadbffcd01e0de5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitMitigationThird Party Advisory

Timeline

No history available yet.