CVE-2025-32901

Summary

In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.

Affected Software

Weaknesses

• CWE-1287: CWE-1287 Improper Validation of Specified Type of Input

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://kdeconnect.kde.org
• https://kde.org/info/security/advisory-20250418-4.txt

• ←Previous
• Next→