UBUNTU-CVE-2026-104067: High severity ubuntu/scribus vulnerability
Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code execution as the user.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Ubuntu systems running Scribus versions earlier than 1.6.7, or 1.7.x versions earlier than 1.7.4, are affected. Exploitation occurs in the context of the user running Scribus.
What does an attacker need to exploit it?
An attacker needs to provide a crafted SVM file whose bitmap and transparency mask dimensions do not match, and a user must import or otherwise process that file with the vulnerable importsvm plugin.
What is the potential impact if exploitation succeeds?
The malformed SVM file can cause out-of-bounds heap reads and writes. This can crash Scribus or potentially allow code execution as the user.