CVE-2026-104067 - Scribus before 1.6.7 Out-of-Bounds Memory Access via SVM Import Plugin
CVE ID :CVE-2026-104067 Published : Oct. 30, 2026, 4:17 p.m. | 1 hour, 43 minutes ago Description :Scribus before 1.6.7 contains an out-of-bounds memory access vulnerability in the importsvm plugin that fails to verify bitmap and transparency mask dimensions match. Attackers can supply a...