CVE-2025-32901: Kde Kdeconnect

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.

Affected products

• Kde Kdeconnect: before 1.33.0 (fixed in 1.33.0)

Published 2025-12-05. Last modified 2026-06-17.