CVE-2026-104063

A flaw was found in Scribus. When decoding planar pixel data in the Mac PICT image loader, the application does not properly validate image dimensions, leading to an out-of-bounds read vulnerability. By convincing a user to import or open a specially crafted PICT file, an attacker can trigger an...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2026-104064

A flaw was found in Scribus. An integer overflow in the Tagged Image File Format TIFF loader allows an attacker to trigger a heap buffer overflow by convincing a user to import a maliciously crafted TIFF image with oversized tile dimensions. Successful exploitation could allow arbitrary code...

CVE-2026-104061

A flaw was found in Scribus. This vulnerability allows arbitrary code execution or a Denial of Service DoS due to an out-of-bounds memory write in the Photoshop Document PSD image loader. An attacker could exploit this flaw by convincing a user to import or open a specially crafted PSD file,...

CVE-2026-104066

A flaw was found in Scribus. By tricking a user into importing or placing a specially crafted Macintosh Picture PICT image file with inconsistent dimension data, an attacker can trigger a heap-based buffer overflow during pixel unpacking. This flaw can allow an attacker to achieve arbitrary code...

CVE-2026-104067

A flaw was found in Scribus. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to an application crash. The StarView Metafile SVM import plugin fails to verify that bitmap and transparency mask dimensions match when processing files. An attacker could exploit...

CVE-2026-104062

A flaw was found in Scribus. This flaw allows an attacker to achieve arbitrary code execution or cause a denial of service DoS by convincing a user to open or import a specially crafted PICT image file. The issue occurs due to improper boundary checks in the PICT image loader and import plugin,...

CVE-2026-104064

Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting...

CVE-2026-104065

Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing...

CVE-2026-104066

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing...

CVE-2026-104067

Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code...

CVE-2026-104062

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

CVE-2026-104061

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-104063

Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap...

CVE-2026-104067 Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin

Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code...

CVE-2026-104067

Scribus versions before 1.6.7 are vulnerable to an out-of-bounds memory access vulnerability within the importsvm plugin . The root cause is a failure to verify that bitmap and transparency mask dimensions match during processing. An attacker can exploit this by providing a crafted SVM file with ...

EUVD-2026-114103

Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code...

CVE-2026-104067 Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin

Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code...

CVE-2026-104066 Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing...

CVE-2026-104066

Scribus versions prior to 1.6.7 are vulnerable to a heap buffer overflow in the Mac PICT image loader and import plugin. The root cause is improper handling of 4-bit indexed pixel data ; specifically, an attacker can provide a crafted PICT file with inconsistent width and row data. When this file...