CVE-2026-104065

Name of the Vulnerable Software and Affected Versions Scribus versions prior to 1.6.7 Scribus versions 1.7.x prior to 1.7.4

Description The importdrw Micrografx Draw plugin contains an out-of-bounds write issue. This occurs because the plugin uses an unvalidated y offset to select image scanlines. A remote attacker can provide a specially crafted DRW file that, when imported, writes decoded bitmap data outside the heap image buffer, potentially leading to application crashes or arbitrary code execution.

Recommendations Update Scribus to version 1.6.7 or later. Update Scribus to version 1.7.4 or later.