CVE-2026-104066
Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
CVSS 4.0 8.5 HIGHCVSS 3.1 7.8 HIGHCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-104066
PublishedScribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing crashes or code execution.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-104066 · CVE overview and exploitation status
cve-program · CVE-2026-104066
- https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
- https://github.com/scribusproject/scribus/commit/544a179241362eb254cb69a5cc68ef24388b265f
- https://github.com/scribusproject/scribus
- https://wiki.scribus.net/canvas/1.6.7_Release
- https://www.vulncheck.com/advisories/scribus-before-1.6.7-heap-buffer-overflow-via-pict-4-bit-pixel-unpacking
Related changes
Linked by CVE identifier- Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking · Affected-version evidence changed · 2 Nov 2026
- Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking · Newly collected advisory · 30 Oct 2026