UBUNTU-CVE-2026-104065: High severity ubuntu/scribus vulnerability
Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing crashes or code execution.
Affected Software
Event History
Frequently Asked Questions
What user action is required for exploitation?
An attacker must persuade a user to import a crafted Micrografx Draw (DRW) file into Scribus. The vulnerability is locally triggered and requires user interaction.
Which Scribus versions are affected?
Scribus versions before 1.6.7 are affected, as are 1.7.x versions before 1.7.4. The issue is in the importdrw Micrografx Draw import plugin.
What is the impact of a successful exploit?
A crafted DRW file can cause decoded bitmap data to be written outside the heap image buffer. This can crash Scribus or potentially allow code execution.