Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-64776 EUVD-2025-208799GHSA-mg85-gp4r-pg79

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker c…

Published Mar 17, 2026 · Updated Mar 18, 2026 · Assigned by talos

Description

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

Affected products

VendorProductAffectedFixed
Canva Affinity 3.0.1.3808 —

References