CVE-2026-104062 | Scribus up to 1.6.6 PICT Image Loader bytesPerLine heap-based overflow

October 30, 2026 Yanac

A vulnerability was found in Scribus up to 1.6.6 and classified as problematic. This issue affects some unknown processing of the component PICT Image Loader. Executing a manipulation of the argument bytesPerLine can lead to heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-104062. The attack is restricted to local execution. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More