CVE-2021-38100

Name of the Vulnerable Software and Affected Versions Corel PhotoPaint Standard 2020 version 22.0.0.474

Description The issue is related to an out-of-bounds write vulnerability when parsing a crafted file, which can allow an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, where a victim must open a malicious CPT file.

Recommendations For Corel PhotoPaint Standard 2020 version 22.0.0.474, avoid opening malicious or untrusted CPT files until a patch is available. As a temporary workaround, consider restricting the use of the file parsing functionality to minimize the risk of exploitation.