CVE-2025-61952

State
Published
Severity
6.1 Medium
Published
Mar 17, 2026
Updated
Mar 18, 2026
Reserved
Dec 10, 2025

Read the record on cve.org

Description

An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.

Scores

CVSSScoreVectorSource
3.16.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:Ltalos

Weaknesses

Affected Products

ProductVersions
AffinityCanva
  • 3.0.1.3808Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.