7.8Alta
CVE-2026-104064Scribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling
Descripción
Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting heap memory to crash Scribus or execute code.
Debilidad (CWE):
CWE-190
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- Patch Commit (1.6.x) patch
- Patch Commit (1.7.x) patch
- https://github.com/scribusproject/scribus product
- https://wiki.scribus.net/canvas/1.6.7_Release release-notes
- VulnCheck Advisory: Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer Handling third-party-advisory