CVE-2025-52926: spytrap-adb Omission of Security-relevant Information
2.7
Basic Information
Technical Details
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| spytrap-adb | rust | < 0.3.5 | 0.3.5 |
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The vulnerability lies in the failure to display critical security information to the user. The analysis of the provided commit 277cec542466b75cf5a8c532581243fd4b7b9713 clearly indicates that the scan::run function in src/scan.rs was modified to address this issue. The patch adds a call to report.app(...), which is responsible for passing the detected stalkerware information to the user interface. Prior to this change, the application would detect the stalkerware, log it, but the user would remain unaware through the interactive UI. Therefore, the scan::run function is the exact location of the vulnerability, as it was its responsibility to communicate these findings. Any runtime profile during the exploitation (or rather, the non-reporting) of this vulnerability would show the scan::run function executing, but failing to trigger the UI update.