Scribus versions before 1.6.7 contain a heap buffer overflow triggered by the Mac PICT image loader when unpacking 4‑bit indexed pixel data. An attacker can supply a crafted PICT file with inconsistent width and row data; when the file is placed or imported, the loader writes beyond the bounds of an allocated buffer, which can cause a crash or, if an attacker controls the overflow, arbitrary code execution. The weakness corresponds to CWE‑787, a classic out‑of‑bounds heap write.

The affected product is Scribus, a desktop publishing application. All releases prior to version 1.6.7 are vulnerable, as the PICT import plugin is part of all builds that support the Mac PICT format.

The CVSS score of 8.5 classifies this as a high‑severity flaw, and the EPSS score is not available, leaving the current exploitation probability unknown. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attacker must provide a crafted PICT file to a user who opens or imports it; this indicates local interaction as the primary attack vector. It is inferred that the vulnerability could also be triggered when the file is embedded in emails or other documents that the user opens, allowing a more indirect exploitation path. The worst‑case impact includes denial of service and potential remote code execution for the user running Scribus.