7.8
HighCVSS 3.1 · from VulnCheck
CVE-2026-104062
Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader
Scribus · Out-of-bounds write · CWE-787AffectedScribus
FixUpdate to 1.6.7 or newer
PublishedOct 30, 15:15 · VulnCheck
ScoredOct 30 · 7.8 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:05 UTC
What we know
No known exploitation. CISA KEV, checked 22:05 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
A successful attack gives full control of the affected system. CISA: technical impact total.
Description
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing or importing it crashes Scribus and may execute code as the user.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed inScribusbefore 1.6.71.6.7
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known