CVE-2021-38096

Coreip.dll in Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious PDF file.

• CWE-787

• https://www.fortiguard.com/zeroday/FG-VD-21-025Third Party Advisory
• https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-productsThird Party Advisory
• https://www.fortiguard.com/zeroday/FG-VD-21-025Third Party Advisory
• https://www.fortinet.com/blog/threat-research/fortinet-security-researcher-discovers-multiple-vulnerabilities-across-multiple-corel-productsThird Party Advisory

Published

Oct 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-38090Integer Overflow vulnerability in function filter16_roberts …8.8
• CVE-2021-38091Integer Overflow vulnerability in function filter16_sobel in…8.8
• CVE-2021-38092Integer Overflow vulnerability in function filter_prewitt in…8.8
• CVE-2021-38093Integer Overflow vulnerability in function filter_robert in …8.8
• CVE-2021-38094Integer Overflow vulnerability in function filter_sobel in l…8.8
• CVE-2021-38095The REST API in Planview Spigit 4.5.3 allows remote unauthen…7.5
• CVE-2021-38097Corel PDF Fusion 2.6.2.0 is affected by an Out-of-bounds Wri…7.8
• CVE-2021-38098Corel PDF Fusion 2.6.2.0 is affected by a Heap Corruption vu…7.8
• CVE-2021-38099CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is a…7.8
• CVE-2021-3810code-server is vulnerable to Inefficient Regular Expression …7.5
• CVE-2021-38100Corel PhotoPaint Standard 2020 22.0.0.474 is affected by an …7.8
• CVE-2021-38101CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 is a…7.8