File Overwrite Vulnerability in Skanpage by KDE

CVE-2025-55174

What is CVE-2025-55174?

In Skanpage prior to version 25.08.0, an oversight in the file handling mechanism can lead to corrupted file writes. The use of QIODevice::ReadWrite instead of QIODevice::WriteOnly allows the contents of a newly created file to be preceded by partial data from an existing file. This vulnerability poses significant risks to data integrity, potentially exposing users to unexpected behaviors and data loss during file operations.

References