CVE-2025-64735 in Affinity
Summary
by MITRE • 03/17/2026
An out-of-bounds read vulnerability exists in the EMF functionality of Canva Affinity. By using a specially crafted EMF file, an attacker could exploit this vulnerability to perform an out-of-bounds read, potentially leading to the disclosure of sensitive information.
Once again VulDB remains the best source for vulnerability data.
Analysis
by VulDB Data Team • 03/21/2026
The vulnerability identified as CVE-2025-64735 represents a critical out-of-bounds read flaw within the EMF (Enhanced Metafile) processing functionality of Canva Affinity software. This issue arises from insufficient input validation and boundary checking mechanisms when handling specially crafted EMF files, creating a potential attack vector that could be exploited by malicious actors. The flaw specifically manifests in the software's ability to parse and render enhanced metafile graphics, which are commonly used for scalable vector graphics in document processing and design applications. The vulnerability stems from the application's failure to properly validate the size and structure of EMF data elements before attempting to read memory regions that may extend beyond the allocated buffer boundaries. This type of vulnerability falls under the CWE-129 category of Improper Validation of Array Index, which directly relates to the software's inability to verify that array access operations remain within valid memory limits. The out-of-bounds read condition creates an opportunity for information disclosure, as the application may inadvertently expose sensitive data from adjacent memory locations containing confidential information, session tokens, or cryptographic keys. Attackers could leverage this vulnerability by crafting malicious EMF files that trigger the flawed parsing logic, potentially leading to unauthorized access to system memory contents and sensitive operational data.
The operational impact of CVE-2025-64735 extends beyond simple information disclosure, as it could enable more sophisticated attack vectors within the broader context of the software's attack surface. When an attacker successfully exploits this vulnerability, they may gain access to memory segments containing user credentials, temporary files, or application-specific data that could be leveraged for further compromise. The nature of this vulnerability aligns with ATT&CK technique T1059.007 for Command and Scripting Interpreter, as it could potentially enable attackers to extract information that might aid in privilege escalation or lateral movement within affected systems. The vulnerability's exploitation requires minimal user interaction, as simply opening or processing a malicious EMF file within Canva Affinity would trigger the out-of-bounds read condition. This characteristic makes the vulnerability particularly dangerous in environments where users may unknowingly open or import potentially malicious files from untrusted sources. The security implications are compounded by the fact that EMF files are commonly used in professional design and document processing workflows, making this attack vector highly relevant in business and creative environments where sensitive corporate or personal data may be processed through the affected software.
Mitigation strategies for CVE-2025-64735 should focus on both immediate defensive measures and long-term architectural improvements to prevent similar vulnerabilities from occurring in the future. Organizations should implement strict file validation procedures that include size limitations, structural integrity checks, and sandboxed processing environments for all EMF file inputs. The recommended approach includes deploying input sanitization mechanisms that enforce proper boundary checking and memory access validation before any EMF processing occurs. Security patches should be applied immediately upon availability from the software vendor, as this vulnerability represents a high-severity risk that could be exploited without user interaction. Additionally, network monitoring solutions should be configured to detect and block suspicious EMF file transfers, particularly in environments where such files may be imported from external sources. The implementation of principle of least privilege access controls and regular security assessments can help reduce the potential impact of successful exploitation attempts. Organizations should also consider implementing application whitelisting policies that restrict execution of potentially vulnerable software components and establish incident response procedures that account for memory disclosure vulnerabilities. From a compliance perspective, this vulnerability may impact organizations subject to regulations such as gdpr, hipaa, or pci dss, requiring immediate remediation to maintain regulatory compliance and avoid potential penalties related to data exposure incidents.