An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger the vulnerability, allowing an attacker to read beyond defined memory bounds and potentially disclose sensitive information. The weakness is classified as CWE‑125, indicating an uncontrolled read of buffer data. The impact is limited to information disclosure rather than code execution or denial of service.

The affected product is Canva Affinity on Windows platforms. According to the advisory, all versions of this application that run on Windows are impacted; no specific version range is provided. The CPE string cpe:2.3:a:canva:affinity:*:*:*:*:*:windows:*:* indicates the vulnerability applies to Windows installations of the product. Users should consult the vendor for detailed version support.

The CVSS score for this issue is 6.1, placing it in the medium severity category. The EPSS score is reported as less than 1 %, suggesting a low probability of current exploitation. The vulnerability is not listed in CISA's KEV catalog. Attack vectors are likely local, requiring the victim to open a malicious EMF file crafted by an attacker. If the file is opened on an affected system, the out-of-bounds read can leak memory contents, but no known escalation to code execution or persistence is documented.