CVE-2016-9043: Corel Coreldraw

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

An out of bound write vulnerability exists in the EMF parsing functionality of CorelDRAW X8 (CdrGfx - Corel Graphics Engine (64-Bit) - 18.1.0.661). A specially crafted EMF file can cause a vulnerability resulting in potential code execution. An attacker can send the victim a specific EMF file to trigger this vulnerability.

Affected products

• Corel Coreldraw: version x8 only

Published 2018-04-24. Last modified 2026-06-17.