Scribus before version 1.6.7 includes an out‑of‑bounds read flaw in its Mac PICT image loader and import plugin. The vulnerability is triggered when a crafted PICT file contains manipulated dimensions that cause the loader to over‑read heap memory. Successful exploitation can result in application crashes or disclosure of sensitive heap data, potentially exposing information or destabilizing the host.

All deployments of Scribus earlier than version 1.6.7 running on macOS that use the standard PICT loader. The flaw is tied to the image import and placement features of the application.

The CVSS score of 6.9 indicates a moderate severity, and the EPSS score is not available, leaving the exact exploitation probability uncertain. The vulnerability is not listed in CISA’s KEV catalog, suggesting it has not been widely observed in the wild yet. Based on the description, the likely attack vector is a local or remote user supplied PICT file that the victim opens or imports; the flaw does not provide remote code execution or privilege escalation. Therefore the risk is primarily limited to crashes and information disclosure in environments where untrusted PICT files may be processed.