Scribus versions prior to 1.6.7 contain an out-of-bounds read vulnerability in the Mac PICT image loader and import plugin. This flaw occurs when decoding planar pixel data from crafted PICT files with manipulated dimensions, potentially causing heap over-reads. Exploitation can lead to application crashes or disclosure of heap memory contents.