Scribus contains a heap buffer overflow in the PICT image loader and import plugin. The vulnerability arises when the plugin accepts an unchecked bytesPerLine value. An attacker can craft a PICT file with a bytesPerLine larger than the QImage scanline size, causing the program to overrun the buffer. The overflow can corrupt heap memory, leading to a crash and, in some executions, execution of arbitrary code with the privileges of the user running Scribus. This aligns with CWE-787, a classic heap‑based buffer overflow.

The affected vendor is Scribus, the desktop publishing application. All releases prior to version 1.6.7 are vulnerable. No specific sub‑versions are listed beyond this threshold, so any installation of Scribus before 1.6.7 should be considered at risk.

Based on the description, the likely attack vector is local: an attacker must supply a crafted PICT file and compel a user to open or import it. The CVSS score of 8.5 indicates high severity, and the EPSS score is unavailable, so the likelihood of exploitation is unknown. This vulnerability is not listed in CISA KEV, but its ability to corrupt heap memory and potentially execute arbitrary code with the user's privileges makes it a significant risk if unpatched.