Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-66042 EUVD-2025-208802GHSA-qpww-hm4r-j335

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker c…

Published Mar 17, 2026 · Updated Mar 18, 2026 · Assigned by talos

Description

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

Affected products

VendorProductAffectedFixed
Canva Affinity 3.0.1.3808 —

References