CVE-2026-104066
Received Received - Intake

Heap Buffer Overflow in Scribus via Malicious PICT File

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT file with inconsistent width and row data that, when placed or imported, writes out of bounds, causing crashes or code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-104066
EUVD
EUVD-2026-114102

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Scribus Scribus 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Scribus before 1.6.7 has a heap buffer overflow in the Mac PICT image loader. When processing 4-bit indexed pixel data, attackers can craft a PICT file with mismatched width and row data. This causes out-of-bounds writes during import or placement, leading to crashes or potential code execution.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable Scribus versions and inspecting files for malicious PICT images. Use commands like 'scribus --version' to check installed versions. Scan imported or placed PICT files for inconsistencies in width and row data.

Impact Analysis

If you use Scribus versions before 1.6.7, opening a malicious PICT file could crash the application or allow attackers to run arbitrary code on your system. This may lead to data loss, system compromise, or unauthorized access depending on user privileges.

Mitigation Strategies

Immediately update Scribus to version 1.6.7 or later. Avoid opening untrusted PICT files. If using older versions, disable the Mac PICT import plugin if possible. Monitor for crashes or unusual behavior when handling PICT files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104066. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart