CVE-2026-104064

Name of the Vulnerable Software and Affected Versions Scribus versions prior to 1.6.7 Scribus versions 1.7.x prior to 1.7.4

Description An integer overflow exists in the scimgdataloader tiff TIFF loader. This flaw allows an attacker to trigger a heap overflow by providing a tiled TIFF file with excessively large tile width, height, and sample values. This memory corruption can lead to an application crash or arbitrary code execution.

Recommendations Update Scribus to version 1.6.7 or later. Update Scribus 1.7.x to version 1.7.4 or later.