Threats tagged 'ghsa-8fqr-jpqv-g6jm'

Scribus versions prior to 1.6.7 contain an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin. This flaw arises from using an unvalidated y offset to select image scanlines, allowing crafted DRW files to write decoded bitmap data outside the intended heap buffer. This can lead to application crashes or potential code execution when a user imports a malicious file.