File Overwrite Vulnerability in Skanpage by KDE
CVE-2025-55174

3.2LOW

Key Information:

Vendor

Kde

Status
Skanpage
Vendor
CVE Published:
26 November 2025

What is CVE-2025-55174?

In Skanpage prior to version 25.08.0, an oversight in the file handling mechanism can lead to corrupted file writes. The use of QIODevice::ReadWrite instead of QIODevice::WriteOnly allows the contents of a newly created file to be preceded by partial data from an existing file. This vulnerability poses significant risks to data integrity, potentially exposing users to unexpected behaviors and data loss during file operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Skanpage 0 < 25.08.0

References

https://github.com/KDE/skanpage/tags
https://invent.kde.org/utilities/skanpage/-/commit/de3ad2...
https://kde.org/info/security/advisory-20250811-1.txt

CVSS V3.1

Score:
3.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.