high7.8
CVE-2025-66342
A type confusion vulnerability exists in the EMF functionality of Canva Affinity.
Impact
A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Canva | Affinity | before 3.1.0 |