CVE-2026-104063: Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image Data

Q: Which Scribus versions need remediation?

The affected versions are Scribus before 1.6.7 and 1.7.x before 1.7.4. Upgrade to 1.6.7 or a 1.7.x release at or after 1.7.4.

Q: What must an attacker do to trigger the issue?

An attacker must provide a crafted PICT image with manipulated planar-image dimensions and have it placed or imported into Scribus. The issue requires user interaction to open or import the malicious file.

Q: What is the practical impact of successful exploitation?

Processing the crafted PICT file can cause heap out-of-bounds reads. This can crash Scribus or disclose heap memory.

Q: What can be done while an update is unavailable?

Avoid placing or importing untrusted PICT files, particularly from untrusted sources. The vulnerable code is the Mac PICT image loader and import plugin handling planar pixel data.

Published Oct 30, 2026

Updated

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap memory disclosure.

Other sources

Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap memory disclosure.

— NVD

Affected Software

11 affected components

debian/scribus*

debian/scribus<=1.5.8+dfsg-4, <=1.6.3+dfsg-0.2, <=1.6.6+dfsg-0.2

ubuntu/scribus*

Event History

Oct 30, 2026

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Data Sourced

via OSV·04:17 PM

Affected Software

Frequently Asked Questions

Which Scribus versions need remediation?

The affected versions are Scribus before 1.6.7 and 1.7.x before 1.7.4. Upgrade to 1.6.7 or a 1.7.x release at or after 1.7.4.

What must an attacker do to trigger the issue?

An attacker must provide a crafted PICT image with manipulated planar-image dimensions and have it placed or imported into Scribus. The issue requires user interaction to open or import the malicious file.

What is the practical impact of successful exploitation?

Processing the crafted PICT file can cause heap out-of-bounds reads. This can crash Scribus or disclose heap memory.

What can be done while an update is unavailable?

Avoid placing or importing untrusted PICT files, particularly from untrusted sources. The vulnerable code is the Mac PICT image loader and import plugin handling planar pixel data.

CVE-2026-104063: Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image Data

Other sources

Affected Software

Event History

Frequently Asked Questions

Which Scribus versions need remediation?

What must an attacker do to trigger the issue?

What is the practical impact of successful exploitation?

What can be done while an update is unavailable?

Company

Resources

Contact

Frequently Asked Questions

Which Scribus versions need remediation?

What must an attacker do to trigger the issue?

What is the practical impact of successful exploitation?

What can be done while an update is unavailable?