Live › vulnerability › CVE-2026-104064
Scribus, an open-source desktop page layout program, has an integer overflow in its TIFF image loader. A crafted tiled TIFF file with large tile dimensions can corrupt heap memory when a user imports it, crashing Scribus or possibly running code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Anyone running Scribus before 1.6.7 who imports TIFF images, particularly files from untrusted sources. The sources do not describe a server-side or networked path, so systems that never open outside TIFF files are less exposed.
No product ranges from the sources yet.
scribus --version or Help > About in the application.1.6.7 are affected; move to 1.6.7 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting heap memory to crash Scribus or execute code.
This page as .md · .json · in your agent: get_signal("CVE-2026-104064")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.