Vulnerability Spotlight: Multiple Vulnerabilities in CorelDRAW X8

Summary: Cisco Talos disclosed several vulnerabilities in CorelDRAW X8 and its PHOTO-PAINT X8 raster editor, including out-of-bounds write flaws in GIF and EMF parsing (TALOS-2016-0244 and TALOS-2016-0261) and TIFF parsing flaws in the ietif.flt library (TALOS-2017-0297 and TALOS-2017-0298). Opening a specifically crafted GIF, EMF or TIFF file can trigger memory corruption leading to arbitrary code execution, and Corel has released a software update addressing the issues.
What's compelling: The attack path is a single file opened from email or a user-generated content site, and the TIFF flaws are confirmed in the 18.1.0.661 filter library shipped with both 32-bit and 64-bit PHOTO-PAINT X8 - so any seat still running that build is exposed until it is patched.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026