Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader
Historical advisory recorded 30 Oct 2026 16:45:26 UTC. Read the latest advisory.
cve-program · CVE-2026-104062
PublishedScribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing or importing it crashes Scribus and may execute code as the user.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-104062
PublishedScribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing or importing it crashes Scribus and may execute code as the user.
- Source published
- 30 Oct 2026 15:15:56 UTC
- Source modified
- 30 Oct 2026 15:15:56 UTC
- Saved here
- 30 Oct 2026 16:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 4.0 · 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1 · 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H