CVE-2026-104061

High

Description

Scribus before 1.6.7 and 1.7.x before 1.7.4 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code execution as the user.

SeverityHigh

CVSS7.8

Exploit probability—

ProductScribus

PublishedOct 30, 2026

First seenNov 4, 2026

Weakness typeCWE-787Out-of-bounds write

How to fix

Update

Scribus Scribus1.6.7, 1.7.4 or later

Patches

github.com/scribusproject/scribus/commit/cca3e4991dd199c103edb4a3bc5351f5cb88d62b
github.com/scribusproject/scribus/commit/d61e7ac5879a6d9dc23113eff2fe0007f398eadc

Vendor advisories

wiki.scribus.net/canvas/1.6.7_Release

Affected products

Product	Affected versions	Fixed in
Scribus Scribus	v < 1.6.7, 1.7.0 ≤ v < 1.7.4	1.6.7, 1.7.4

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.