CVE-2026-104066 - Scribus before 1.6.7 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking
CVE ID :CVE-2026-104066 Published : Oct. 30, 2026, 4:17 p.m. | 1 hour, 43 minutes ago Description :Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the Mac PICT image loader and import plugin when unpacking 4-bit indexed pixel data. Attackers can supply a crafted PICT...