UBUNTU-CVE-2026-104062: Buffer Overflow
Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing or importing it crashes Scribus and may execute code as the user.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Scribus before 1.6.7, or of the 1.7.x branch before 1.7.4, are exposed when they place or import an attacker-supplied PICT image.
What must an attacker do to exploit it?
The attacker must provide a crafted PICT file with a bytesPerLine value larger than the QImage scanline size. Exploitation requires the Scribus user to place or import that file, and can crash the application or potentially execute code as that user.
How can I determine whether my installation is affected?
Check the installed Scribus version. Versions earlier than 1.6.7 are affected, as are 1.7.x versions earlier than 1.7.4.