3 matches found
CVE-2026-104061
Scribus versions before 1.6.7 are vulnerable to a heap out-of-bounds write within the scimgdataloader_psd loader. The vulnerability is caused by the application using unchecked values from a PSD file as lookup array indexes. An attacker can exploit this by convincing a user to import or place a c...
8.5CVSS6.3AI score
SaveExploits0References4
CVE-2026-104061 Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image Loader
Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...
8.5CVSS
SaveExploits0References4
20