CVE-2025-32899

Summary

In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.

Affected Software

VendorProductVersion RangeStatus
KDEKDEConnect0 < 1.33.0affected

Weaknesses

  • CWE-1250: CWE-1250 Improper Preservation of Consistency Between Independent Representations of Shared State

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References