Description

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

INFO

Published Date :

2026-03-17T18:52:43.114Z

Last Modified :

2026-03-18T17:00:15.191Z

Source :

talos
AFFECTED PRODUCTS

The following products are affected by CVE-2025-64776 vulnerability.

Vendors Products
Canva
  • Affinity

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact