VYPR
← All advisories
Low severity2.7NVD Advisory· Published Jun 23, 2025· Updated Apr 15, 2026

CVE-2025-52926

CVE-2025-52926

Description

In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
spytrap-adbcrates.io
< 0.3.50.3.5

Patches

2
277cec542466

Fixed that hits stalkerware-rules were not being passed to TUI

https://github.com/spytrap-org/spytrap-adbsytctJun 21, 2025via ghsa
commit
1 file changed · +9 −0
  • src/scan.rs+9 −0 modified
    @@ -104,6 +104,15 @@ pub async fn run(
                         pkg.id, name
                     );
                     warn!("Suspicious {:?}: {}", SuspicionLevel::High, alert);
+                    report
+                        .app(
+                            pkg.id.clone(),
+                            Suspicion {
+                                level: SuspicionLevel::High,
+                                description: alert,
+                            },
+                        )
+                        .await?;
                 }
 
                 // fetch infos about package
0bdce137f1bf
https://github.com/spytrap-org/spytrap-adbvia osv

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.