{"id":"CVE-2025-66270","details":"The KDE Connect protocol 8 before 2025-11-28 does not correlate device IDs across two packets. This affects KDE Connect before 25.12 on desktop, KDE Connect before 0.5.4 on iOS, KDE Connect before 1.34.4 on Android, GSConnect before 68, and Valent before 1.0.0.alpha.49.","modified":"2026-07-22T04:02:49.437917Z","published":"2025-12-05T00:00:00Z","related":["openSUSE-SU-2025:15800-1"],"database_specific":{"cna_assigner":"mitre","cwe_ids":["CWE-290"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66270.json"},"references":[{"type":"WEB","url":"https://invent.kde.org/network/kdeconnect-android/-/commit/675d2d24a1eb95d15d9e5bde2b7e2271d5ada6a9"},{"type":"WEB","url":"https://invent.kde.org/network/kdeconnect-ios/-/commit/6c003c22d04270cabc4b262d399c753d55cf9080"},{"type":"WEB","url":"https://invent.kde.org/network/kdeconnect-kde/-/commit/4e53bcdd5d4c28bd9fefd114b807ce35d7b3373e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66270.json"},{"type":"ADVISORY","url":"https://kde.org/info/security/advisory-20251128-1.txt"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-66270"},{"type":"FIX","url":"https://github.com/GSConnect/gnome-shell-extension-gsconnect/commit/a38246deec0af50ae218cdc51db32cdd7eb145e3"},{"type":"FIX","url":"https://github.com/andyholmes/valent/commit/85f773124a67ed1add79e7465bb088ec667cccce"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/andyholmes/valent","events":[{"introduced":"0"},{"fixed":"515428093514ab85e4529a8e07d54a3758a2c013"},{"fixed":"85f773124a67ed1add79e7465bb088ec667cccce"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.0.0.alpha.49"}],"source":["DESCRIPTION","REFERENCES"]}},{"type":"GIT","repo":"https://github.com/gsconnect/gnome-shell-extension-gsconnect","events":[{"introduced":"0"},{"fixed":"147944e4e2cd04d98e05f0e27be9e4174ca07f9a"},{"fixed":"a38246deec0af50ae218cdc51db32cdd7eb145e3"}],"database_specific":{"source":["DESCRIPTION","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"68"}]}}],"versions":["8","v1.0.0.alpha.48","v1.0.0.alpha.47","v1.0.0.alpha.46","v1.0.0.alpha.45","v63","v67","v66","v59","v62","v50","v54","v56","v58","v57","v55","v49","v48","v47","v46","v44","v43","v42","v42-rc1","v41","v40","v40-rc5","v40-rc4","v40-rc3","v40-rc2","v40-rc1","v39","v38","v38-rc3","v38-rc2","v38-rc1","v37","v36","v35","v34","v34-rc2","v34-rc1","v33","v32","v32-rc1","v31","v31-rc2","v31-rc1","v30","v29","v29-rc2","v29-rc1","v28","v28-rc1","v27","v27-rc1","v26","v25","v25-rc3","v25-rc2","v25-rc1","v24","v23","v22","v22-rc1","v21","v21-rc2","v21-rc1","v20","v20-rc4","v20-rc3","v20-rc2","v20-rc1","v19","v18","v18-rc1","v17","v17-rc1","v16","v15","v15-rc1","v13","v13-rc2","v13-rc1","v13-alpha2","v13-alpha","v9","v8","v7","v6","v5","v4","v3","v2","v1","v1-beta3","v1-beta2","v1-beta1","v1-alpha3","v1-alpha2","v1-alpha1"],"database_specific":{"vanir_signatures":[{"signature_version":"v1","source":"https://github.com/andyholmes/valent/commit/85f773124a67ed1add79e7465bb088ec667cccce","target":{"file":"src/plugins/lan/valent-lan-channel-service.c","function":"handshake_read_identity_cb"},"deprecated":false,"digest":{"length":1153,"function_hash":"270469539013828858515992651566742368465"},"id":"CVE-2025-66270-0378a486","signature_type":"Function"},{"digest":{"line_hashes":["295441420765439209793313560697992115129","103547131321790095811207031624004175501","4236644495770605623909284852238119502","299189658745001810727134487762659583364","109420901733764282823966585117706891840","164753608904063504125764505165299078362","286245813073815078493115232858446605233"],"threshold":0.9},"id":"CVE-2025-66270-5e25422a","signature_type":"Line","signature_version":"v1","source":"https://github.com/andyholmes/valent/commit/85f773124a67ed1add79e7465bb088ec667cccce","target":{"file":"src/plugins/lan/valent-lan-channel-service.c"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-66270.json","vanir_signatures_modified":"2026-07-22T04:02:49Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N"}]}