Security Advisory

CVE-2025-66342

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-17 18:52:52
Last updated 2026-03-18 17:00:08
Assigner talos
State PUBLISHED

Description

A type confusion vulnerability exists in the EMF functionality of Canva Affinity. A specially crafted EMF file can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution.