EUVD lists out-of-bounds read in Scribus PICT importer (EUVD-2026-114099)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Scribus
- Product
- Scribus
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114099, as shared on Mastodon, describes an out-of-bounds read in the Mac PICT image loader of Scribus before 1.6.7. The entry scores it 6.9/10 (CVSS v3.1) and says a crafted PICT file can cause a crash when placed or imported.
If you use Scribus
Upgrade Scribus to version 1.6.7 or later.
Avoid opening or importing PICT files from untrusted sources until patched.
Do not import SVM files from untrusted sources until patched.
Update Scribus to version 1.6.7 or later
Import image and document files only from trusted sources until patched
Open PICT and other image files only from trusted sources until patched
What the sources say 7
· Mastodon: “Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match.” Source
· Mastodon: “Scribus before 1.6.7 contains an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin when decoding planar pixel data.” Source
· Mastodon: “Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data.” Source
· Mastodon: “Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines.” Source
· Mastodon: “Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloader_tiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions.” Source
· Mastodon: “Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value.” Source
· Mastodon: “Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked PSD file values as lookup array indexes.” Source