Live › vulnerability › CVE-2026-104067
Scribus before 1.6.7 fails to check that bitmap and transparency mask dimensions match when importing SVM files. A crafted SVM file can make the plugin read and write heap memory, which can crash Scribus or run code as the user.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Anyone who opens a crafted SVM file in a vulnerable Scribus build. The flaw is in the SVM import path, so a user who never imports SVM files is not reached by it. Systems that process untrusted SVM files automatically are the main concern.
No product ranges from the sources yet.
scribus --version and compare against the fixed version in the fix field.1.6.7 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a crafted SVM file with mismatched mask dimensions to trigger heap reads and writes, causing crashes or code execution as the user.
This page as .md · .json · in your agent: get_signal("CVE-2026-104067")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.