CVE-2026-104067
Received Received - Intake

Out-of-Bounds Memory Access in Scribus via ImportSVM Plugin

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code execution as the user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-104067
EUVD
EUVD-2026-114103

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Scribus Scribus 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-787 The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Scribus before 1.6.7 has an out-of-bounds memory access flaw in the importsvm plugin. It fails to check if bitmap and transparency mask dimensions match in SVM files. Attackers can exploit this by providing a crafted file with mismatched mask sizes, leading to heap memory corruption.

Detection Guidance

Detecting this vulnerability requires checking for vulnerable Scribus versions (before 1.6.7) and inspecting files processed by the importsvm plugin. Use commands like 'scribus --version' to check installed versions. Monitor system logs for crashes during SVM file processing. No direct network detection commands are available.

Impact Analysis

This vulnerability can cause crashes or allow arbitrary code execution on your system when opening a malicious SVM file. Since it requires user interaction to open the file, it primarily affects users who handle untrusted documents.

Mitigation Strategies

Immediately update Scribus to version 1.6.7 or later. Avoid opening untrusted SVM files until patched. Disable the importsvm plugin if not required. Monitor for suspicious activity or crashes during file processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104067. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart