high7.8
CVE-2025-64301
An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity.
Impact
An out‑of‑bounds write vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out‑of‑bounds write, potentially leading to code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canva | Affinity | before 3.1.0 |