CVE-2026-104066

A flaw was found in Scribus. By tricking a user into importing or placing a specially crafted Macintosh Picture PICT image file with inconsistent dimension data, an attacker can trigger a heap-based buffer overflow during pixel unpacking. This flaw can allow an attacker to achieve arbitrary code...