Threats tagged 'ghsa-p49c-gchq-m6cv'

Scribus versions prior to 1.6.7 have a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader. This flaw arises from using unchecked PSD file values as array indexes, which can lead to heap memory corruption. An attacker can exploit this by convincing a user to open or import a specially crafted PSD file, potentially causing application crashes or arbitrary code execution with the user's privileges.