CVE-2025-55174

EUVD-2025-199713
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.2 LOW
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Debian logo
Debian Releases
Debian Product
Codename
skanpage
bookworm
no-dsa
forky
26.04.0-1
fixed
sid
26.04.0-1
fixed
trixie
25.04.2-1+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
skanpage
jammy
dne
noble
needs-triage
plucky
ignored
questing
ignored
resolute
needs-triage
Common Weakness Enumeration
References
https://github.com/KDE/skanpage/tags
https://invent.kde.org/utilities/skanpage/-/commit/de3ad2941054a26920e022dc7c4a3dc16c065b5a
https://kde.org/info/security/advisory-20250811-1.txt