Vulnerability in Kde Skanpage

CVE-2025-55174

In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.

EPSS: 0.001 (3.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.2 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2025-55174?
CVE-2025-55174 is a low-severity vulnerability in Kde Skanpage, classified under CWE-684. CVSS score: 3.2/10. Published 2025-11-26.
How severe is CVE-2025-55174?
Low severity. CVSS v3 base score is 3.2 out of 10.