6.1Orta
CVE-2026-104063Scribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data
Açıklama
Scribus before 1.6.7 and 1.7.x before 1.7.4 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data. Attackers can supply a crafted PICT file with manipulated dimensions that, when placed or imported, causes heap over-reads leading to crashes or heap memory disclosure.
Zayıflık türü (CWE):
CWE-125
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- Patch Commit (1.6.x) patch
- Patch Commit (1.7.x) patch
- https://github.com/scribusproject/scribus product
- https://wiki.scribus.net/canvas/1.6.7_Release release-notes
- VulnCheck Advisory: Scribus before 1.6.7 Out-of-Bounds Read via PICT Planar Image Data third-party-advisory