Multiple Scribus Vulnerabilities Discovered in Versions Before 1.6.7

• •Four vulnerabilities in Scribus before version 1.6.7 identified.
• •Attack vectors include heap out-of-bounds writes and heap overflow.
• •Users are urged to update to version 1.6.7 to mitigate risks.

Four distinct vulnerabilities have been identified in Scribus versions prior to 1.6.7, including heap out-of-bounds writes via Micrografx Draw and PSD image loaders, a heap overflow via TIFF tile buffer handling, and out-of-bounds memory access via the SVM import plugin. These vulnerabilities could potentially allow attackers to execute arbitrary code or crash the application. The vulnerabilities affect all users of Scribus prior to the patched version 1.6.7. As of now, there are no reports of in the wild. Users are advised to update to the latest version to mitigate risks. The vulnerabilities have been assigned CVE identifiers, but specific CVE numbers were not disclosed in the articles. The vulnerabilities were disclosed on the same day as the articles' publication.