Low severity · published Nov 26, 2025
CVE-2025-55174
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the…
3.2
CVSS
0.2%
EPSS
No
On KEV
Description
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Attack vector
Local
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SK
Skanpage · KDE
before 25.08.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-55174
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-55174
github.com
https://github.com/KDE/skanpage/tags
invent.kde.org
https://invent.kde.org/utilities/skanpage/-/commit/de3ad2941054a26920e022dc7c4a3dc16c065b5a
kde.org
https://kde.org/info/security/advisory-20250811-1.txt