LowFix available
skanpage — security advisory
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
- Products
- skanpage
- Affected versions
- 22.12.3-1, 23.08.1-1, 23.08.1-2, 23.08.1-2.1, 24.08.2-1, 24.12.0-1, 25.03.90-1, 25.04.0-1, 25.04.0-2, 25.04.2-1, 25.12.3-1, 26.04.0-1
- Fixed versions
- 25.04.2-1+deb13u1, 25.12.3-1
- CVEs
- CVE-2025-55174
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 22:42 UTC · Revision 1
Source evidence
In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
osv:DEBIAN-CVE-2025-55174
skanpage
Fixed versions: Not specified
skanpage
Fixed versions: 25.04.2-1+deb13u1
skanpage
Fixed versions: 25.12.3-1
Complete source record
{
"id": "7998ec0a7cb5dec2038fa112f740c6ff23cdec1aecbbde4305a360fa902a2b9a",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2025-55174",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2025-55174",
"summary": "In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.",
"evidence": "osv:DEBIAN-CVE-2025-55174",
"products": [
{
"name": {
"value": "skanpage",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "22.12.3-1",
"evidence": "/affected/0/versions"
},
{
"value": "23.08.1-1",
"evidence": "/affected/0/versions"
},
{
"value": "23.08.1-2",
"evidence": "/affected/0/versions"
},
{
"value": "23.08.1-2.1",
"evidence": "/affected/0/versions"
},
{
"value": "24.08.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "24.12.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "25.03.90-1",
"evidence": "/affected/0/versions"
},
{
"value": "25.04.0-1",
"evidence": "/affected/0/versions"
},
{
"value": "25.04.0-2",
"evidence": "/affected/0/versions"
},
{
"value": "25.04.2-1",
"evidence": "/affected/0/versions"
},
{
"value": "25.12.3-1",
"evidence": "/affected/0/versions"
},
{
"value": "26.04.0-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "skanpage",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "25.04.2-1+deb13u1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "25.04.2-1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "skanpage",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "25.12.3-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "25.04.2-1",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "low",
"structured": {
"id": "DEBIAN-CVE-2025-55174",
"aliases": [
"DEBIAN-CVE-2025-55174"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "skanpage",
"purl": "pkg:deb/debian/skanpage?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"22.12.3-1",
"23.08.1-1",
"23.08.1-2",
"23.08.1-2.1",
"24.08.2-1",
"24.12.0-1",
"25.03.90-1",
"25.04.0-1",
"25.04.0-2",
"25.04.2-1",
"25.12.3-1",
"26.04.0-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-55174.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.04.2-1+deb13u1"
}
]
}
],
"package": {
"name": "skanpage",
"purl": "pkg:deb/debian/skanpage?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"25.04.2-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-55174.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "25.12.3-1"
}
]
}
],
"package": {
"name": "skanpage",
"purl": "pkg:deb/debian/skanpage?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"25.04.2-1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-55174.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-23T17:47:28.431308163Z",
"provider": "osv",
"upstream": [
"CVE-2025-55174"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2025-55174"
]
},
"related_cves": [
{
"value": "CVE-2025-55174",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 417112,
"published_at": "2025-11-26T06:15:44.893+00:00"
}