An out‑of‑bounds read vulnerability exists within the Enhanced Metafile (EMF) handling of Canva Affinity. By supplying a specially crafted EMF file, an attacker can trigger an out‑of‑bounds read that may expose confidential information residing outside the intended memory buffer. This weakness corresponds to CWE‑125 and can compromise the confidentiality of data that the application processes.

The vulnerability affects the Canva Affinity product running on Windows platforms. Specific version information is not supplied in the CNA data; therefore, all releases of Affinity are potentially impacted until a vendor‑issued update is released.

The CVSS v3 score of 6.1 indicates a moderate severity. EPSS score is below 1%, implying a low probability of exploitation at this time, and the vulnerability is not listed in CISA’s KEV catalog. The most probable attack vector would arise when a user opens a malicious EMF file—directly or via a document that references such a file—so the vulnerability is primarily triggered through user‑initiated file handling. Because the vulnerability concerns an out‑of‑bounds read, it does not enable arbitrary code execution, but it can still lead to the disclosure of sensitive application or system data.