Heap Out-of-Bounds Write Vulnerability in Scribus by Open Source Community

CVE-2026-104061

What is CVE-2026-104061?

Scribus, a popular desktop publishing software, is susceptible to a heap out-of-bounds write vulnerability in its PSD image loader. This flaw occurs due to the use of unchecked values from PSD files for array indexing. Malicious users can exploit this by tricking victims into importing a specially crafted PSD file, leading to corruption of heap memory. This may result in application crashes and could potentially enable code execution within the context of the user's environment.

References