CVE-2024-21668

react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging...

@coinbase/wallet-mobile-sdk (>=0.1.1, <=1.0.10), @getvolume/react-native (>=0.3.2, <=2.2.3) +44 more potentially affected by CVE-2024-21668 via react-native-mmkv (>=2.1.0, <=2.10.2)

react-native-mmkv NPM version =2.1.0, =0.1.1, =0.3.2, =0.66.4-beta.18, =1.0.0, =1.0.0, =6.0.0, =1.0.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.89 and more Source cves: CVE-2024-21668 Source advisory: OSV:GHSA-4JH3-6JHV-2MGP...

@coinbase/wallet-mobile-sdk (>=0.1.1, <=1.0.10), @getvolume/react-native (>=0.3.2, <=2.2.3) +44 more potentially affected by CVE-2024-21668 via react-native-mmkv (>=2.1.0, <=2.10.2)

react-native-mmkv NPM version =2.1.0, =0.1.1, =0.3.2, =0.66.4-beta.18, =1.0.0, =1.0.0, =6.0.0, =1.0.0, =0.0.6, =0.0.6, =0.0.6, =0.0.6, =0.0.89 and more Source cves: CVE-2024-21668 Source advisory: GHSA-4JH3-6JHV-2MGP...

CVE-2024-21668

react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging...

CVE-2024-21668

The CVE-2024-21668 entry concerns react-native-mmkv, a React Native library for MMKV. Before version 2.11.0, it logged the database encryption key to Android system logs, enabling potential retrieval via ADB and compromising confidentiality; iOS is not affected. The issue is mitigated by upgradin...

CVE-2024-21668 Insertion of Sensitive Information into Log File in react-native-mmkv

react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging...

@coinbase/wallet-mobile-sdk (>=0.1.1, <=1.0.10), @egalteam/framework-react-native (>=2.0.0-beta34, <=2.0.1) +48 more potentially affected by CVE-2024-21668 via react-native-mmkv (>=1.3.2, <=2.10.2)

react-native-mmkv NPM version =1.3.2, =0.1.1, =2.0.0-beta34, =0.3.2, =1.0.1, =0.64.1-rc.3, =1.0.0, =1.0.0, =6.0.0, =1.0.0, =0.0.6, =0.0.6, =0.0.106 and more Source cves: CVE-2024-21668 Source advisory: MEND:CVE-2024-21668...

CVE-2024-21668: Insertion of Sensitive Information into Log File

react-native-mmkv is a library that allows easy use of MMKV inside React Native applications. Before version 2.11.0, the react-native-mmkv logged the optional encryption key for the MMKV database into the Android system log. The key can be obtained by anyone with access to the Android Debugging...

PT-2024-19010 · Unknown · React-Native-Mmkv

Name of the Vulnerable Software and Affected Versions: react-native-mmkv versions prior to 2.11.0 Description: The react-native-mmkv library logged the optional encryption key for the MMKV database into the Android system log before version 2.11.0. This allowed anyone with access to the Android...