PT-2025-49197 · Kde · Kdeconnect

Published 2025-12-05 · Updated 2025-12-05 · CVE-2025-32901

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions KDE Connect versions prior to 1.33.0

Description A flaw exists in KDE Connect that could allow a malicious actor to cause an application crash by sending crafted device IDs via broadcast UDP. The issue affects the Android version of the software.

Recommendations Update KDE Connect to version 1.33.0 or later.

Fix

Weakness Enumeration

CWE-1287

Related Identifiers

CVE-2025-32901

Affected Products

Kdeconnect

References · 9

• https://ubuntu.com/security/CVE-2025-32901 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32901 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32901 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-32901 · Security Note
• https://twitter.com/VulmonFeeds/status/1996951134712254723 · Twitter Post
• https://kde.org/info/security/advisory-20250418-4.txt · Note
• https://twitter.com/CVEnew/status/1996841726162751688 · Twitter Post
• https://t.me/cveNotify/144836 · Telegram Post
• https://kdeconnect.kde.org · Note