CVE-2021-38110

The CVE-2021-38110 entry relates to Corel WordPerfect 2020 (version 20.0.0.200). It describes an Out-of-bounds Write in Word97Import200.dll during parsing of a crafted DOC file, enabling arbitrary code execution in the user’s context. Exploitation requires user interaction (victim opens a malicio...

CVE-2021-38108

The CVE-2021-38108 issue affects Corel WordPerfect 2020 (version 20.0.0.200) via Word97Import200.dll. It is an Out-of-bounds Read vulnerability triggered while parsing a crafted DOC file, allowing an attacker to access unauthorized system memory in the context of the current user. Exploitation re...