What’s Vulnerable › Vulnerabilities

CVE-2025-55174

• Severity: low (CVSS 3.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-26 · updated 2026-10-18
• Weakness: CWE-684

Description

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.

Affected products

• KDE Skanpage: before 25.08.0 — fixed in 25.08.0

How to fix

Upgrade to a fixed version: KDE Skanpage 25.08.0. Check the vendor advisory for mitigations.

References

• https://github.com/KDE/skanpage/tags
• https://invent.kde.org/utilities/skanpage/-/commit/de3ad2941054a26920e022dc7c4a3dc16c065b5a
• https://kde.org/info/security/advisory-20250811-1.txt

Get alerted when CVE-2025-55174 or the next vulnerability affects your stack