Scribus Before 1.6.7 Heap Out Of Bounds Write Via Micrografx Draw Import

Back www.vulncheck.com

Scribus Before 1.6.7 Heap Out Of Bounds Write Via Micrografx Draw Import

www.vulncheck.com • October 31, 2026

Share: View original

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Scribus Vulnerabilities Discovered in Versions Before 1.6.7 Four distinct vulnerabilities have been identified in Scribus versions prior to 1.6.7, including heap out-of-bounds writes via Micrografx Draw and PSD image loaders, a heap overflow via TIFF tile buffer handling, and out-of-bounds memory access via the SVM import plugin. These vulnerabilities could potentially allow attackers to execute arbitrary code or crash the application. The vulnerabilities affect all users of Scribus prior to the patched version 1.6.7. As of now, there are no reports of in the wild. Users are advised to update to the latest version to mitigate risks. The vulnerabilities have been assigned CVE identifiers, but specific CVE numbers were not disclosed in the articles. The vulnerabilities were disclosed on the same day as the articles' publication. 46

Extracted Entities

CWE Weaknesses (1)

CWE-122 - Heap-based Buffer Overflow

Platforms (1)

Vulnerabilities (1)

Scribus Before 1.6.7 Heap Out Of Bounds Write Via Micrografx Draw Import Vulnerability