CVE-2026-104065
Received Received - Intake

Out-of-Bounds Write in Scribus via DRW File Import

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing crashes or code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-104065
EUVD
EUVD-2026-114101

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Scribus Scribus 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Scribus before version 1.6.7 has an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin. The issue occurs because the plugin uses an unvalidated y offset to select image scanlines. Attackers can create a specially crafted DRW file that, when imported by a user, causes decoded bitmap data to be written outside the intended heap image buffer. This can lead to crashes or arbitrary code execution.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable Scribus versions and inspecting files for DRW imports. Use commands like 'scribus --version' to check installed versions. Monitor for crashes or unusual behavior when opening DRW files. No direct detection commands are provided in the context.

Impact Analysis

If you use Scribus versions before 1.6.7 and open a malicious DRW file, this vulnerability could allow attackers to execute arbitrary code on your system. This may result in system compromise, data theft, or further malware installation. Users could experience crashes or unexpected behavior when processing untrusted DRW files.

Mitigation Strategies

Immediately update Scribus to version 1.6.7 or later. Avoid opening untrusted DRW files. Disable or remove the importdrw plugin if not needed. Monitor vendor advisories for patches.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104065. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart