CVE-2025-32901: Medium severity KDE KDE Connect vulnerability
Published Dec 5, 2025
·Updated
In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.
Affected Software
1 affected component
KDE KDE Connect<1.33.0
Event History
Dec 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-32901?
CVE-2025-32901 is classified as a high-severity vulnerability due to its potential to cause application crashes.
2
How do I fix CVE-2025-32901?
The recommended fix for CVE-2025-32901 is to update KDE Connect to version 1.33.0 or later.
3
What systems are affected by CVE-2025-32901?
CVE-2025-32901 affects KDE Connect versions prior to 1.33.0 on Android devices.
4
What type of attack does CVE-2025-32901 enable?
CVE-2025-32901 allows attackers to crash the KDE Connect application by sending malicious device IDs via broadcast UDP.
5
Is there a patch available for CVE-2025-32901?
Yes, a patch is included in the update to KDE Connect version 1.33.0, which addresses CVE-2025-32901.