CVE-2026-104066

Name of the Vulnerable Software and Affected Versions Scribus versions prior to 1.6.7 Scribus versions 1.7.x prior to 1.7.4

Description A heap buffer overflow occurs in the Mac PICT image loader and import plugin during the unpacking of 4-bit indexed pixel data. A heap buffer overflow is a memory corruption issue where a program writes more data to a heap-allocated buffer than it can hold. An attacker can use a specially crafted PICT file containing inconsistent width and row data to trigger an out-of-bounds write when the file is placed or imported, potentially leading to application crashes or arbitrary code execution.

Recommendations Update to version 1.6.7 or later. Update to version 1.7.4 or later.