CVE-2025-32901

In KDE Connect before 1.33.0 on Android, malicious device IDs sent via broadcast UDP could cause an application crash...

CVE-2025-32901

In KDE Connect before 1.33.0 on Android, malicious device IDs sent via broadcast UDP could cause an application crash...

CVE-2025-32900

CVE-2025-32900 concerns the KDE Connect information-exchange protocol, where spoofable broadcast UDP traffic can temporarily alter the displayed device information. The issue affects multiple platforms prior to fixed versions: KDE Connect on Android < 1.33.0, KDE Connect on desktop < 25.04,...

CVE-2025-66270

The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49...

PT-2025-49195

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

PT-2025-49221

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5...

CVE-2025-32899

In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP...

Ubuntu 25.10 : KDE Connect vulnerability (USN-7905-1)

The remote Ubuntu 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7905-1 advisory. It was discovered that KDE Connect incorrectly handled device IDs. An attacker could possibly use this issue to bypass authentication and connect an unpaired device...

USN-7905-1 kdeconnect vulnerability

It was discovered that KDE Connect incorrectly handled device IDs. An attacker could possibly use this issue to bypass authentication and connect an unpaired device...

Debian dsa-6063 : kdeconnect - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6063 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6063-1 [email protected] https://www.debian.org/security/ Moritz...

[SECURITY] [DSA 6063-1] kdeconnect security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6063-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 26, 2025 https://www.debian.org/security/faq -...

PT-2025-48260

Name of the Vulnerable Software and Affected Versions KDE Connect versions prior to 25.04.2-1+deb13u1 gnome-shell-extension-gsconnect versions prior to 62-1+deb13u1 Description A missing validation of the device ID during handshakes in KDE Connect and gnome-shell-extension-gsconnect could allow a...

Linux Distros Unpatched Vulnerability : CVE-2020-26164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In kdeconnect-kde aka KDE Connect before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, ...

GLSA-202101-16 : KDE Connect: Denial of service

The remote host is affected by the vulnerability described in GLSA-202101-16 KDE Connect: Denial of service Multiple issues causing excessive resource consumption were found in KDE Connect. Impact : An attacker could cause a possible Denial of Service condition. Workaround : There is no known...

KDE Connect: Denial of service

Background KDE Connect is a project that enables all your devices to communicate with each other. Description Multiple issues causing excessive resource consumption were found in KDE Connect. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known...

DEBIAN-CVE-2020-26164

In kdeconnect-kde aka KDE Connect before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack...

UBUNTU-CVE-2020-26164

In kdeconnect-kde aka KDE Connect before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack...

kdeconnect -- packet manipulation can be exploited in a Denial of Service attack

Albert Astals Cid reports: KDE Project Security Advisory Title KDE Connect: packet manipulation can be exploited in a Denial of Service attack Risk Rating Important CVE CVE-2020-26164 Versions kdeconnect Date 2 October 2020 Overview An attacker on your local network could send maliciously crafted...

Fedora Update for gnome-shell-extension-gsconnect FEDORA-2019-27e7b92407

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 29 Update: gnome-shell-extension-gsconnect-21-2.fc29

The KDE Connect project allows devices to securely share content such as notifications and files as well as interactive features such as SMS messagi ng and remote input. The KDE Connect team maintains cross-desktop, Android and Sailfish applications as well as an interface for KDE Plasma. GSConne...