KDE KDEConnect vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting KDE KDEConnect: 2 record(s), with affected versions and fixes.
CVE-2025-32901
Medium · 4.3
CWE-1287 Dec 5, 2025
In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP)…
In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.
CVE-2025-32899
Medium · 4.3
CWE-1250 Dec 5, 2025
In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired…
In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.