PT-2026-133622

CVE-2026-104067

Published

2026-10-30

Updated

2026-11-05

Description by

CVSS 4.0

8.5

High

MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Scribus versions prior to 1.6.7 Scribus versions 1.7.x prior to 1.7.4

Description An out-of-bounds memory access issue exists in the importsvm plugin. The component fails to verify that bitmap and transparency mask dimensions match. A remote attacker can provide a specially crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, which may lead to application crashes or arbitrary code execution with the privileges of the user.

Recommendations Update Scribus to version 1.6.7 or later. Update Scribus to version 1.7.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Jean Ghali

Tristan Madani

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write