CVE-2025-55174

Published: Nov 26, 2025Modified: Jun 17, 2026Deferred

3.2

Vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Exploitability: 1.4 / Impact: 1.4

Source: MITRE (Secondary)

Description

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.

Related CWEs

CWE-684

Incorrect Provision of Specified Functionality

The code does not function according to its published specifications, potentially leading to incorrect usage.

References (3)

https://github.com/KDE/skanpage/tags

Source: cve@mitre.org

https://invent.kde.org/utilities/skanpage/-/commit/de3ad2941054a26920e022dc7c4a3dc16c065b5a

Source: cve@mitre.org

https://kde.org/info/security/advisory-20250811-1.txt

Source: cve@mitre.org

Timeline

No history available yet.