CVE catalog

CVE-2025-32900

kdeconnect affected and fixed versions

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 59.

Severity: Medium · CVSS 4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Published: Dec 5, 2025, 6:16:08 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.12% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	gnome-shell-extension-gsconnect	`62-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie-security	kdeconnect	`25.04.2-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiantrixie	gnome-shell-extension-gsconnect	`62-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie	kdeconnect	`25.04.0-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiantrixie	kdeconnect	`25.04.2-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiansid	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiansid	gnome-shell-extension-gsconnect	`74-1`	Fixed	[CVE-2025-32900]
Debiansid	kdeconnect	`25.04.0-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiansid	kdeconnect	`26.08.2-1`	Fixed	[CVE-2025-32900]
Debianforky	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debianforky	gnome-shell-extension-gsconnect	`74-1`	Fixed	[CVE-2025-32900]

Showing 12 fix observations. All 20 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
UnknownRelease not reported	gnome-shell-extension-gsconnect	Not reported	UnknownSource applicability is not established	Provider not reported
UnknownRelease not reported	kdeconnect	Not reported	UnknownSource applicability is not established	Provider not reported
Debianbookworm	gnome-shell-extension-gsconnect	Not reported	AffectedDistribution reports no fix	[CVE-2025-32900]
Debianbookworm	gnome-shell-extension-gsconnect	`54-2`	Affected	[CVE-2025-32900]
Debianbookworm	kdeconnect	Not reported	AffectedDistribution reports no fix	[CVE-2025-32900]
Debianbookworm	kdeconnect	`22.12.3-1`	Affected	[CVE-2025-32900]
Debianforky	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debianforky	gnome-shell-extension-gsconnect	`74-1`	Fixed	[CVE-2025-32900]
Debianforky	kdeconnect	`25.04.0-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debianforky	kdeconnect	`26.08.2-1`	Fixed	[CVE-2025-32900]
Debiansid	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiansid	gnome-shell-extension-gsconnect	`74-1`	Fixed	[CVE-2025-32900]
Debiansid	kdeconnect	`25.04.0-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiansid	kdeconnect	`26.08.2-1`	Fixed	[CVE-2025-32900]
Debiantrixie	gnome-shell-extension-gsconnect	`62-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiantrixie	gnome-shell-extension-gsconnect	`62-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie	kdeconnect	`25.04.0-1`	FixedDistribution-reported fixed boundary	[CVE-2025-32900]
Debiantrixie	kdeconnect	`25.04.2-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie-security	gnome-shell-extension-gsconnect	`62-1+deb13u1`	Fixed	[CVE-2025-32900]
Debiantrixie-security	kdeconnect	`25.04.2-1+deb13u1`	Fixed	[CVE-2025-32900]

Original provider fields

{
  "package_releases": [
    {
      "name": "kdeconnect",
      "status": "fixed",
      "release": "sid",
      "version": "26.08.2-1"
    },
    {
      "name": "kdeconnect",
      "status": "fixed",
      "release": "forky",
      "version": "26.08.2-1"
    },
    {
      "name": "kdeconnect",
      "status": "fixed",
      "release": "trixie",
      "version": "25.04.2-1+deb13u1"
    },
    {
      "name": "kdeconnect",
      "status": "fixed",
      "release": "trixie-security",
      "version": "25.04.2-1+deb13u1"
    },
    {
      "name": "kdeconnect",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "22.12.3-1"
    },
    {
      "name": "gnome-shell-extension-gsconnect",
      "status": "fixed",
      "release": "sid",
      "version": "74-1"
    },
    {
      "name": "gnome-shell-extension-gsconnect",
      "status": "fixed",
      "release": "forky",
      "version": "74-1"
    },
    {
      "name": "gnome-shell-extension-gsconnect",
      "status": "fixed",
      "release": "trixie",
      "version": "62-1+deb13u1"
    },
    {
      "name": "gnome-shell-extension-gsconnect",
      "status": "fixed",
      "release": "trixie-security",
      "version": "62-1+deb13u1"
    },
    {
      "name": "gnome-shell-extension-gsconnect",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "54-2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "kdeconnect",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "25.04.0-1"
    },
    {
      "bug": null,
      "name": "kdeconnect",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "25.04.0-1"
    },
    {
      "bug": null,
      "name": "kdeconnect",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "25.04.0-1"
    },
    {
      "bug": null,
      "name": "kdeconnect",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "gnome-shell-extension-gsconnect",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "62-1"
    },
    {
      "bug": null,
      "name": "gnome-shell-extension-gsconnect",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "62-1"
    },
    {
      "bug": null,
      "name": "gnome-shell-extension-gsconnect",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "62-1"
    },
    {
      "bug": null,
      "name": "gnome-shell-extension-gsconnect",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    }
  ],
  "distribution_packages": [
    {
      "name": "gnome-shell-extension-gsconnect",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    },
    {
      "name": "kdeconnect",
      "fixed_version": "not yet fixed",
      "applicability_unknown": true
    }
  ]
}

Publisher notes

[bookworm] kdeconnect: Minor issue, design limitation of protocol version prior to 8 [bookworm] gnome-shell-extension-gsconnect: Minor issue, design limitation of protocol version prior to 8

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[gnome-shell-extension-gsconnect]Unknown
Details (2)
- 54-2 · all · bookworm
  Affected
  dsa · gnome-shell-extension-gsconnect · debian · bookworm; dsa · gnome-shell-extension-gsconnect · debian · 12
- 54-2 · all · bookworm
  Affected
  dsa · gnome-shell-extension-gsconnect · debian · bookworm; dsa · gnome-shell-extension-gsconnect · debian · 12
[gnome-shell-extension-gsconnect-browsers]Unknown
Source package: [gnome-shell-extension-gsconnect]
Details (2)
- 54-2 · all · bookworm
  Affected
  dsa · gnome-shell-extension-gsconnect · debian · bookworm; dsa · gnome-shell-extension-gsconnect · debian · 12
- 54-2 · all · bookworm
  Affected
  dsa · gnome-shell-extension-gsconnect · debian · bookworm; dsa · gnome-shell-extension-gsconnect · debian · 12
[kdeconnect]Unknown
Details (2)
- 22.12.3-1 · amd64 · bookworm
  Affected
  dsa · kdeconnect · debian · bookworm; dsa · kdeconnect · debian · 12
- 22.12.3-1 · arm64 · bookworm
  Affected
  dsa · kdeconnect · debian · bookworm; dsa · kdeconnect · debian · 12
[nautilus-kdeconnect]Unknown
Source package: [kdeconnect]
Details (2)
- 22.12.3-1 · all · bookworm
  Affected
  dsa · kdeconnect · debian · bookworm; dsa · kdeconnect · debian · 12
- 22.12.3-1 · all · bookworm
  Affected
  dsa · kdeconnect · debian · bookworm; dsa · kdeconnect · debian · 12

[Debian 13 (Trixie)]

[gnome-shell-extension-gsconnect]Unknown
Details (4)
- 62-1+deb13u1 · all · trixie
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
[gnome-shell-extension-gsconnect-browsers]Unknown
Source package: [gnome-shell-extension-gsconnect]
Details (4)
- 62-1+deb13u1 · all · trixie
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
- 62-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 62-1
  dsa · gnome-shell-extension-gsconnect · debian · 13
[kdeconnect]Unknown
Details (4)
- 25.04.2-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
[kdeconnect-libs]Unknown
Source package: [kdeconnect]
Details (4)
- 25.04.2-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
[nautilus-kdeconnect]Unknown
Source package: [kdeconnect]
Details (4)
- 25.04.2-1+deb13u1 · all · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · all · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · all · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
[qml6-module-org-kde-kdeconnect]Unknown
Source package: [kdeconnect]
Details (4)
- 25.04.2-1+deb13u1 · amd64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13
- 25.04.2-1+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 25.04.0-1
  dsa · kdeconnect · debian · 13

Observed: Oct 27, 2026, 10:56:04 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]