Description (CNA)
A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Canva / Affinity | affected 3.0.1.3808 |
CWE
CWE-843
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2297
- https://trust.canva.com/?tcuUid=1f728b0d-17f3-4c9c-97e9-6662b769eb62
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.