Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
Historical advisory recorded 30 Oct 2026 16:45:26 UTC. Read the latest advisory.
cve-program · CVE-2026-104066
PublishedScribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing crashes or code execution.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-104066
PublishedScribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing crashes or code execution.
- Source published
- 30 Oct 2026 15:15:59 UTC
- Source modified
- 30 Oct 2026 15:15:59 UTC
- Saved here
- 30 Oct 2026 16:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 4.0 · 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1 · 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H