CVE-2021-38106

Name of the Vulnerable Software and Affected Versions Corel Presentations version 2020 20.0.0.200

Description The issue is related to an out-of-bounds read vulnerability in the UAX200.dll library of Corel Presentations. This vulnerability can be exploited by an unauthenticated attacker to access unauthorized system memory in the context of the current user. Exploitation requires user interaction, where a victim must open a specially crafted PPT file.

Recommendations For Corel Presentations version 2020 20.0.0.200, consider avoiding the use of the UAX200.dll library until a patch is available. As a temporary workaround, restrict the opening of PPT files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.