Threats tagged 'ghsa-qqfg-r365-fmcj'

Scribus versions prior to 1.6.7 have a heap buffer overflow vulnerability in the PICT image loader and import plugin. This flaw arises from improper validation of the bytesPerLine value in PICT files, which can exceed the QImage scanline size. Exploiting this vulnerability can cause Scribus to crash and potentially allow code execution with the privileges of the user running the application.