CVE-2025-32900

| EUVD-2025-201362 MEDIUM
2025-12-05 [email protected]
4.3
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

4
Patch Released
Mar 31, 2026 - 21:13 nvd
Patch available
Analysis Generated
Mar 15, 2026 - 17:08 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 17:08 euvd
EUVD-2025-201362
CVE Published
Dec 05, 2025 - 06:16 nvd
MEDIUM 4.3

Tags

Microsoft Information Disclosure Google Ubuntu Debian Android Suse

Description

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

Analysis

A security vulnerability in the KDE Connect information-exchange protocol (CVSS 4.3). Remediation should follow standard vulnerability management procedures.

Technical Context

Vulnerability type not specified by vendor. Affects the KDE Connect information-exchange protocol.

Affected Products

['the KDE Connect information-exchange protocol']

Remediation

Monitor vendor channels for patch availability.

Priority Score

22
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +22
POC: 0

Vendor Status

Ubuntu

Priority: Medium
kdeconnect
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
plucky ignored end of life, was needs-triage

Debian

gnome-shell-extension-gsconnect
Release Status Fixed Version Urgency
bookworm vulnerable 54-2 -
trixie (security), trixie fixed 62-1+deb13u1 -
forky, sid fixed 71-1 -
(unstable) fixed 62-1 -
kdeconnect
Release Status Fixed Version Urgency
bullseye vulnerable 20.12.3-2 -
bookworm vulnerable 22.12.3-1 -
trixie (security), trixie fixed 25.04.2-1+deb13u1 -
forky, sid fixed 25.11.80+git20251121.7090b106-1 -
(unstable) fixed 25.04.0-1 -

Share

CVE-2025-32900 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy