CVE-2025-55174
BaseFortify
Publication date: 2025-11-26
Last updated on: 2025-11-26
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| kde | skanpage | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-684 | The code does not function according to its published specifications, potentially leading to incorrect usage. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in KDE Skanpage before version 25.08.0 occurs because the software uses QIODevice::ReadWrite mode instead of QIODevice::WriteOnly when overwriting files. This causes the new file to contain the new content at the beginning but also retain partial content from the old file at the end, leading to unintended file content mixing.
How can this vulnerability impact me? :
The vulnerability can cause files to be partially overwritten, resulting in files that contain both new and leftover old data. This can lead to data corruption or leakage of unintended information, potentially affecting data integrity and causing confusion or errors in file usage.