CVE-2025-32899

KDE / KDEConnect PUBLISHED

Description (CNA)

In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.

Affected (CNA)

Vendor / product	Versions
KDE / KDEConnect	affected 0 before 1.33.0

CWE

CWE-1250

References

https://kdeconnect.kde.org
https://kde.org/info/security/advisory-20250418-1.txt

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.