Cloudanix VulnDB

CVE-2025-32899

Medium · 4.3

CVSS

4.3

EPSS

0.2%

Published

Dec 5, 2025

CISA due date

—

The record

In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities