CVE-2025-63289

State
Published
Severity
9.1 Critical
Published
Nov 12, 2025
Updated
Nov 13, 2025
Reserved
Oct 27, 2025

Read the record on cve.org

Description

Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file

Scores

CVSSScoreVectorSource
3.19.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCISA-ADP

Weaknesses

  • CWE-321 Use of Hard-coded Cryptographic Key

Affected Products

ProductVersions
n/an/a
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.