EUVD-2025-18859
Omission of Security-relevant Information (CWE-223)
GHSA-5p2p-6g2c-hf7m
2.7
CVSS 3.1 · NVD
Severity by source
NVD
PRIMARY
2.7
LOW
AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
Ubuntu
LOW
qualitative
Primary rating from NVD.
CVSS VectorNVD
Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
None
Integrity
Low
Availability
None
Lifecycle Timeline
4
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
EUVD ID Assigned
Mar 15, 2026 - 22:10 euvd
EUVD-2025-18859
Analysis Generated
Mar 15, 2026 - 22:10 vuln.today
CVE Published
Jun 23, 2025 - 01:15 nvd
LOW 2.7
DescriptionCVE.org
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.
AnalysisAI
A security vulnerability in scan.rs in spytrap-adb (CVSS 2.7). Remediation should follow standard vulnerability management procedures.
Technical ContextAI
Vulnerability type not specified by vendor. Affects scan.rs in spytrap-adb.
RemediationAI
Monitor vendor channels for patch availability.
Same weakness CWE-223 – Omission of Security-relevant Information
View allSame technique Information Disclosure
View allVendor StatusVendor
Ubuntu
Priority: Lowrust-spytrap-adb
| Release | Status | Version |
|---|---|---|
| jammy | DNE | - |
| noble | DNE | - |
| oracular | ignored | end of life, was needs-triage |
| upstream | released | 0.3.5 |
| plucky | ignored | end of life, was needed |
| questing | needed | - |
Debian
rust-spytrap-adb
| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| trixie | fixed | 0.3.5-1 | - |
| forky, sid | fixed | 0.3.5-4 | - |
| (unstable) | fixed | 0.3.5-1 | - |
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).