CVE-2026-104063

Scribus versions before 1.6.7 are vulnerable to an out-of-bounds read vulnerability within the Mac PICT image loader and import plugin. The root cause occurs during the decoding of planar pixel data , where a crafted PICT file with manipulated dimensions can trigger heap over-reads . This flaw ma...

CVE-2026-104063 Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leadi...

EUVD-2026-114099

Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap...

CVE-2026-104063 Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leadi...

CVE-2026-104062

Scribus versions prior to 1.6.7 are vulnerable to a heap buffer overflow within the PICT image loader and import plugin. The root cause is an unchecked bytesPerLine value ; if an attacker crafts a PICT file where this value exceeds the QImage scanline size , it can result in heap memory corruptio...

CVE-2026-104062 Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage...

EUVD-2026-114098

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

CVE-2026-104061

Scribus versions before 1.6.7 are vulnerable to a heap out-of-bounds write within the scimgdataloader_psd loader. The vulnerability is caused by the application using unchecked values from a PSD file as lookup array indexes. An attacker can exploit this by convincing a user to import or place a c...

CVE-2026-104061 Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes an...

CVE-2026-104062 Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage...

CVE-2026-104062 Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage...

CVE-2026-119601

A flaw was found in afflib. An attacker could exploit this vulnerability by supplying a specially crafted Advanced Forensic Format AFF image file containing mismatched page and sector sizes. When processed by an affected tool, this flaw causes a heap out-of-bounds write, resulting in memory...

CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Exploit This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the porteplumeprevisu endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tag...

CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

DEBIAN-CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

webp_Android10_r33_CVE-2023-1999

/ \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools 'cwebp' and...

EUVD-2026-113948

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

CVE-2026-119528

A flaw was found in GIMP. The PSD plug-in’s image resource header loader uses an incorrect destination size when copying a converted resource name into a fixed stack buffer. Opening a crafted PSD file can cause a stack-based buffer overflow, leading to a crash and potentially arbitrary code...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE /tmp/1.txt" batch scan python3...

CLEANSTART-2026-GY60035 Security fix for GHSA-qpw4-5x99-6vjp applied in: bank-vaults 1.32.1-r1, kubernetes-csi-external-snapshotter 8.6.0-r1, yunikorn-k8shim 1.8.0-r1, temporal-server-fips 1.31.1-r1, ollama-fips 0.34.4-r2, flux-image-automation-controller 1.2.1-r1, kumactl 2.14.0-r1, velero-fips 1.18.2-r1, velero-fips 1.18.2-r2, velero-fips 1.18.2-r3, fulcio 1.8.7-r2

GHSA-qpw4-5x99-6vjp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...