CVE-2025-32899: Medium severity KDE KDE Connect vulnerability
Published Dec 5, 2025
·Updated
In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.
Affected Software
1 affected component
KDE KDE Connect<1.33.0
Event History
Dec 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-32899?
CVE-2025-32899 has a medium severity rating due to its potential to disrupt device pairing.
2
How do I fix CVE-2025-32899?
To fix CVE-2025-32899, update KDE Connect to version 1.33.0 or later.
3
What does CVE-2025-32899 affect?
CVE-2025-32899 affects KDE Connect versions prior to 1.33.0 on Android devices.
4
What is the exploit method for CVE-2025-32899?
CVE-2025-32899 can be exploited by sending a crafted invalid discovery packet over broadcast UDP.
5
What impact does CVE-2025-32899 have on users?
The impact of CVE-2025-32899 is that it can cause paired devices to become unpaired unexpectedly.