Base Score

LOW2.7

CVE-2025-52926

In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.

VectorLOCAL

Published Bycve@mitre.org

Published DateJun 23, 2025, 01:15

Affected Versions(1)

spytrap-adb(crates.io)

Introduced0

Fixed0.3.5

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
spytrap-adb(crates.io)	0	0.3.5	N/A

Weakness Type (CWE):CWE-223

CVSS Metrics

Base Score

2.7

Vector String

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Base Severity

LOW

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

NONE

Integrity (I)

LOW

Availability (A)

NONE

References

Base Score

LOW2.7

Weakness Type (CWE):CWE-223

CVSS Metrics

Base Score

2.7

Vector String

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Base Severity

LOW

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

HIGH

Privileges Required (PR)

NONE

User Interaction (UI)

REQUIRED

Scope (S)

CHANGED

Confidentiality (C)

NONE

Integrity (I)

LOW

Availability (A)

NONE